interface CfnSecurityControlProps

Language	Type name
.NET	`Amazon.CDK.AWS.SecurityHub.CfnSecurityControlProps`
Go	`github.com/aws/aws-cdk-go/awscdk/v2/awssecurityhub#CfnSecurityControlProps`
Java	`software.amazon.awscdk.services.securityhub.CfnSecurityControlProps`
Python	`aws_cdk.aws_securityhub.CfnSecurityControlProps`
TypeScript	`aws-cdk-lib` » `aws_securityhub` » `CfnSecurityControlProps`

Properties for defining a CfnSecurityControl.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_securityhub as securityhub } from 'aws-cdk-lib';
const cfnSecurityControlProps: securityhub.CfnSecurityControlProps = {
  parameters: {
    parametersKey: {
      valueType: 'valueType',

      // the properties below are optional
      value: {
        boolean: false,
        double: 123,
        enum: 'enum',
        enumList: ['enumList'],
        integer: 123,
        integerList: [123],
        string: 'string',
        stringList: ['stringList'],
      },
    },
  },

  // the properties below are optional
  lastUpdateReason: 'lastUpdateReason',
  securityControlArn: 'securityControlArn',
  securityControlId: 'securityControlId',
};

Properties

Name	Type	Description
parameters	`IResolvable` `\| { [string]:` `IResolvable` `\|` `ParameterConfigurationProperty` `}`	An object that identifies the name of a control parameter, its current value, and whether it has been customized.
lastUpdateReason?	`string`	The most recent reason for updating the customizable properties of a security control.
securityControlArn?	`string`	The Amazon Resource Name (ARN) for a security control across standards, such as `arn:aws:securityhub:eu-central-1:123456789012:security-control/S3.1` . This parameter doesn't mention a specific standard.
securityControlId?	`string`	The unique identifier of a security control across standards.

parameters

Type: IResolvable | { [string]: IResolvable | ParameterConfigurationProperty }

An object that identifies the name of a control parameter, its current value, and whether it has been customized.

lastUpdateReason?

Type: string (optional)

The most recent reason for updating the customizable properties of a security control.

This differs from the UpdateReason field of the BatchUpdateStandardsControlAssociations API, which tracks the reason for updating the enablement status of a control. This field accepts alphanumeric characters in addition to white spaces, dashes, and underscores.

securityControlArn?

Type: string (optional)

The Amazon Resource Name (ARN) for a security control across standards, such as arn:aws:securityhub:eu-central-1:123456789012:security-control/S3.1 . This parameter doesn't mention a specific standard.

securityControlId?

Type: string (optional)

The unique identifier of a security control across standards.

Values for this field typically consist of an AWS service name and a number, such as APIGateway.3.