Class CfnHubProps
Properties for defining a CfnHub
.
Inheritance
Implements
Namespace: Amazon.CDK.AWS.SecurityHub
Assembly: Amazon.CDK.Lib.dll
Syntax (csharp)
public class CfnHubProps : Object, ICfnHubProps
Syntax (vb)
Public Class CfnHubProps
Inherits Object
Implements ICfnHubProps
Remarks
See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html
ExampleMetadata: fixture=_generated
Examples
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.SecurityHub;
var tags;
var cfnHubProps = new CfnHubProps {
AutoEnableControls = false,
ControlFindingGenerator = "controlFindingGenerator",
EnableDefaultStandards = false,
Tags = tags
};
Synopsis
Constructors
CfnHubProps() |
Properties
AutoEnableControls | Whether to automatically enable new controls when they are added to standards that are enabled. |
ControlFindingGenerator | Specifies whether an account has consolidated control findings turned on or off. |
EnableDefaultStandards | Whether to enable the security standards that Security Hub has designated as automatically enabled. |
Tags | An array of key-value pairs to apply to this resource. |
Constructors
CfnHubProps()
public CfnHubProps()
Properties
AutoEnableControls
Whether to automatically enable new controls when they are added to standards that are enabled.
public object AutoEnableControls { get; set; }
Property Value
System.Object
Remarks
By default, this is set to true
, and new controls are enabled automatically. To not automatically enable new controls, set this to false
.
ControlFindingGenerator
Specifies whether an account has consolidated control findings turned on or off.
public string ControlFindingGenerator { get; set; }
Property Value
System.String
Remarks
If the value for this field is set to SECURITY_CONTROL
, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards.
If the value for this field is set to STANDARD_CONTROL
, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards.
The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is SECURITY_CONTROL
if you enabled Security Hub on or after February 23, 2023.
EnableDefaultStandards
Whether to enable the security standards that Security Hub has designated as automatically enabled.
public object EnableDefaultStandards { get; set; }
Property Value
System.Object
Remarks
If you don't provide a value for EnableDefaultStandards
, it is set to true
, and the designated standards are automatically enabled in each AWS Region where you enable Security Hub . If you don't want to enable the designated standards, set EnableDefaultStandards
to false
.
Currently, the automatically enabled standards are the Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0 and AWS Foundational Security Best Practices (FSBP).
Tags
An array of key-value pairs to apply to this resource.
public object Tags { get; set; }
Property Value
System.Object
Remarks
For more information, see Tag .