PolicyProperty Struct
An object that defines how AWS Security Hub CSPM is configured.
It includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls).
Example
ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_securityhub as securityhub } from 'aws-cdk-lib';
const policyProperty: securityhub.CfnConfigurationPolicy.PolicyProperty = {
securityHub: {
enabledStandardIdentifiers: ['enabledStandardIdentifiers'],
securityControlsConfiguration: {
disabledSecurityControlIdentifiers: ['disabledSecurityControlIdentifiers'],
enabledSecurityControlIdentifiers: ['enabledSecurityControlIdentifiers'],
securityControlCustomParameters: [{
parameters: {
parametersKey: {
valueType: 'valueType',
// the properties below are optional
value: {
boolean: false,
double: 123,
enum: 'enum',
enumList: ['enumList'],
integer: 123,
integerList: [123],
string: 'string',
stringList: ['stringList'],
},
},
},
securityControlId: 'securityControlId',
}],
},
serviceEnabled: false,
},
};
Properties
securityHuboptionalIResolvable | CfnConfigurationPolicy.SecurityHubPolicyPropertysecurity_huboptionaltyping.Union[IResolvable, SecurityHubPolicyProperty]securityHuboptionalIResolvableSecurityHuboptionalIResolvableSecurityHuboptionalinterface{}#The AWS service that the configuration policy applies to.