aws-cdk-lib.aws_securityhub

AWS Security Hub Construct Library

This module is part of the AWS Cloud Development Kit project.

import * as securityhub from 'aws-cdk-lib/aws-securityhub';

import aws_cdk.aws_securityhub as securityhub

import software.amazon.awscdk.services.securityhub.*;

using Amazon.CDK.AWS.SecurityHub;

import securityhub "github.com/aws/aws-cdk-go/awscdk"

There are no official hand-written (L2) constructs for this service yet. Here are some suggestions on how to proceed:

• Search Construct Hub for SecurityHub construct libraries
• Use the automatically generated L1 constructs, in the same way you would use the CloudFormation AWS::SecurityHub resources directly.

There are no hand-written (L2) constructs for this service yet. However, you can still use the automatically generated L1 constructs, and use this service exactly as you would using CloudFormation directly.

For more information on the resources and properties available for this service, see the CloudFormation documentation for AWS::SecurityHub.

(Read the CDK Contributing Guide and submit an RFC if you are interested in contributing to this construct library.)

Types

Name	Kind	Summary
CfnAggregatorV2	Construct (L1)	Enables aggregation across AWS Regions .
CfnAutomationRule	Construct (L1)	The AWS::SecurityHub::AutomationRule resource specifies an automation rule based on input parameters.
CfnAutomationRuleV2	Construct (L1)	Creates a V2 automation rule.
CfnConfigurationPolicy	Construct (L1)	The AWS::SecurityHub::ConfigurationPolicy resource creates a central configuration policy with the defined settings.
CfnConnector	Construct (L1)	Creates a connector to a third-party cloud provider in Security Hub CSPM.
CfnConnectorV2	Construct (L1)	Grants permission to create a connectorV2 based on input parameters.
CfnDelegatedAdmin	Construct (L1)	The AWS::SecurityHub::DelegatedAdmin resource designates the delegated AWS Security Hub CSPM administrator account for an organization.
CfnFindingAggregator	Construct (L1)	The AWS::SecurityHub::FindingAggregator resource enables cross-Region aggregation.
CfnHub	Construct (L1)	The AWS::SecurityHub::Hub resource specifies the enablement of the AWS Security Hub CSPM service in your AWS account .
CfnHubV2	Construct (L1)	Returns details about the service resource in your account.
CfnInsight	Construct (L1)	The AWS::SecurityHub::Insight resource creates a custom insight in AWS Security Hub CSPM .
CfnOrganizationConfiguration	Construct (L1)	The AWS::SecurityHub::OrganizationConfiguration resource specifies the way that your AWS organization is configured in AWS Security Hub CSPM .
CfnPolicyAssociation	Construct (L1)	The AWS::SecurityHub::PolicyAssociation resource specifies associations for a configuration policy or a self-managed configuration.
CfnProductSubscription	Construct (L1)	The AWS::SecurityHub::ProductSubscription resource creates a subscription to a third-party product that generates findings that you want to receive in AWS Security Hub CSPM .
CfnSecurityControl	Construct (L1)	The AWS::SecurityHub::SecurityControl resource specifies custom parameter values for an AWS Security Hub CSPM control.
CfnStandard	Construct (L1)	The AWS::SecurityHub::Standard resource specifies the enablement of a security standard.
CfnAggregatorV2Props	Struct	Properties for defining a CfnAggregatorV2.
CfnAutomationRule.AutomationRulesActionProperty	Struct	One or more actions that AWS Security Hub CSPM takes when a finding matches the defined criteria of a rule.
CfnAutomationRule.AutomationRulesFindingFieldsUpdateProperty	Struct	Identifies the finding fields that the automation rule action updates when a finding matches the defined criteria.
CfnAutomationRule.AutomationRulesFindingFiltersProperty	Struct	The criteria that determine which findings a rule applies to.
CfnAutomationRule.DateFilterProperty	Struct	A date filter for querying findings.
CfnAutomationRule.DateRangeProperty	Struct	A date range for the date filter.
CfnAutomationRule.MapFilterProperty	Struct	A map filter for filtering AWS Security Hub CSPM findings.
CfnAutomationRule.NoteUpdateProperty	Struct	The updated note.
CfnAutomationRule.NumberFilterProperty	Struct	A number filter for querying findings.
CfnAutomationRule.RelatedFindingProperty	Struct	Provides details about a list of findings that the current finding relates to.
CfnAutomationRule.SeverityUpdateProperty	Struct	Updates to the severity information for a finding.
CfnAutomationRule.StringFilterProperty	Struct	A string filter for filtering AWS Security Hub CSPM findings.
CfnAutomationRule.WorkflowUpdateProperty	Struct	Used to update information about the investigation into the finding.
CfnAutomationRuleProps	Struct	Properties for defining a CfnAutomationRule.
CfnAutomationRuleV2.AutomationRulesActionV2Property	Struct	Allows you to configure automated responses.
CfnAutomationRuleV2.AutomationRulesFindingFieldsUpdateV2Property	Struct	Allows you to define the structure for modifying specific fields in security findings.
CfnAutomationRuleV2.BooleanFilterProperty	Struct	Boolean filter for querying findings.
CfnAutomationRuleV2.CompositeFilterProperty	Struct	Enables the creation of filtering criteria for security findings.
CfnAutomationRuleV2.CriteriaProperty	Struct	The filtering type and configuration of the automation rule.
CfnAutomationRuleV2.DateFilterProperty	Struct	A date filter for querying findings.
CfnAutomationRuleV2.DateRangeProperty	Struct	A date range for the date filter.
CfnAutomationRuleV2.ExternalIntegrationConfigurationProperty	Struct	The settings for integrating automation rule actions with external systems or service.
CfnAutomationRuleV2.MapFilterProperty	Struct	A map filter for filtering AWS Security Hub CSPM findings.
CfnAutomationRuleV2.NumberFilterProperty	Struct	A number filter for querying findings.
CfnAutomationRuleV2.OcsfBooleanFilterProperty	Struct	Enables filtering of security findings based on boolean field values in OCSF.
CfnAutomationRuleV2.OcsfDateFilterProperty	Struct	Enables filtering of security findings based on date and timestamp fields in OCSF.
CfnAutomationRuleV2.OcsfFindingFiltersProperty	Struct	Specifies the filtering criteria for security findings using OCSF.
CfnAutomationRuleV2.OcsfMapFilterProperty	Struct	Enables filtering of security findings based on map field values in OCSF.
CfnAutomationRuleV2.OcsfNumberFilterProperty	Struct	Enables filtering of security findings based on numerical field values in OCSF.
CfnAutomationRuleV2.OcsfStringFilterProperty	Struct	Enables filtering of security findings based on string field values in OCSF.
CfnAutomationRuleV2.StringFilterProperty	Struct	A string filter for filtering AWS Security Hub CSPM findings.
CfnAutomationRuleV2Props	Struct	Properties for defining a CfnAutomationRuleV2.
CfnConfigurationPolicy.ParameterConfigurationProperty	Struct	An object that provides the current value of a security control parameter and identifies whether it has been customized.
CfnConfigurationPolicy.ParameterValueProperty	Struct	An object that includes the data type of a security control parameter and its current value.
CfnConfigurationPolicy.PolicyProperty	Struct	An object that defines how AWS Security Hub CSPM is configured.
CfnConfigurationPolicy.SecurityControlCustomParameterProperty	Struct	A list of security controls and control parameter values that are included in a configuration policy.
CfnConfigurationPolicy.SecurityControlsConfigurationProperty	Struct	An object that defines which security controls are enabled in an AWS Security Hub CSPM configuration policy.
CfnConfigurationPolicy.SecurityHubPolicyProperty	Struct	An object that defines how AWS Security Hub CSPM is configured.
CfnConfigurationPolicyProps	Struct	Properties for defining a CfnConfigurationPolicy.
CfnConnector.AzureProviderConfigurationProperty	Struct	The configuration for connecting to an Azure environment.
CfnConnector.AzureScopeConfigurationProperty	Struct	The scope configuration for an Azure connector, defining the tenant or subscription scope.
CfnConnector.HealthIssueProperty	Struct	Represents a specific health issue detected for a connector.
CfnConnector.ProviderProperty	Struct
CfnConnectorProps	Struct	Properties for defining a CfnConnector.
CfnConnectorV2.AzureProviderConfigurationProperty	Struct	The configuration settings required to establish an integration between AWS Security Hub and Azure.
CfnConnectorV2.AzureScopeConfigurationProperty	Struct	The scope configuration for an Azure connector.
CfnConnectorV2.HealthIssueProperty	Struct	A health issue associated with the connector.
CfnConnectorV2.JiraCloudProviderConfigurationProperty	Struct	The initial configuration settings required to establish an integration between Security Hub CSPM and Jira Cloud.
CfnConnectorV2.ProviderProperty	Struct	The third-party provider detail for a service configuration.
CfnConnectorV2.ServiceNowProviderConfigurationProperty	Struct	The initial configuration settings required to establish an integration between Security Hub CSPM and ServiceNow ITSM.
CfnConnectorV2Props	Struct	Properties for defining a CfnConnectorV2.
CfnDelegatedAdminProps	Struct	Properties for defining a CfnDelegatedAdmin.
CfnFindingAggregatorProps	Struct	Properties for defining a CfnFindingAggregator.
CfnHubProps	Struct	Properties for defining a CfnHub.
CfnHubV2.NetworkScanningProperty	Struct	Configuration for the Network Scanning opt-in feature of Security Hub V2.
CfnHubV2Props	Struct	Properties for defining a CfnHubV2.
CfnInsight.AwsSecurityFindingFiltersProperty	Struct	A collection of filters that are applied to all active findings aggregated by AWS Security Hub CSPM .
CfnInsight.BooleanFilterProperty	Struct	Boolean filter for querying findings.
CfnInsight.DateFilterProperty	Struct	A date filter for querying findings.
CfnInsight.DateRangeProperty	Struct	A date range for the date filter.
CfnInsight.IpFilterProperty	Struct	The IP filter for querying findings.
CfnInsight.KeywordFilterProperty	Struct	A keyword filter for querying findings.
CfnInsight.MapFilterProperty	Struct	A map filter for filtering AWS Security Hub CSPM findings.
CfnInsight.NumberFilterProperty	Struct	A number filter for querying findings.
CfnInsight.StringFilterProperty	Struct	A string filter for filtering AWS Security Hub CSPM findings.
CfnInsightProps	Struct	Properties for defining a CfnInsight.
CfnOrganizationConfigurationProps	Struct	Properties for defining a CfnOrganizationConfiguration.
CfnPolicyAssociationProps	Struct	Properties for defining a CfnPolicyAssociation.
CfnProductSubscriptionProps	Struct	Properties for defining a CfnProductSubscription.
CfnSecurityControl.ParameterConfigurationProperty	Struct	An object that provides the current value of a security control parameter and identifies whether it has been customized.
CfnSecurityControl.ParameterValueProperty	Struct	An object that includes the data type of a security control parameter and its current value.
CfnSecurityControlProps	Struct	Properties for defining a CfnSecurityControl.
CfnStandard.StandardsControlProperty	Struct	Provides details about an individual security control.
CfnStandardProps	Struct	Properties for defining a CfnStandard.