Package software.amazon.awscdk.services.securityhub

Interface CfnConfigurationPolicy.SecurityControlsConfigurationProperty

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnConfigurationPolicy.SecurityControlsConfigurationProperty.Jsii$Proxy

Enclosing class:

CfnConfigurationPolicy

@Stability(Stable)
public static interface CfnConfigurationPolicy.SecurityControlsConfigurationProperty
extends software.amazon.jsii.JsiiSerializable

An object that defines which security controls are enabled in an AWS Security Hub configuration policy.

The enablement status of a control is aligned across all of the enabled standards in an account.

This property is required only if ServiceEnabled is set to true in your configuration policy.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.securityhub.*;
 SecurityControlsConfigurationProperty securityControlsConfigurationProperty = SecurityControlsConfigurationProperty.builder()
         .disabledSecurityControlIdentifiers(List.of("disabledSecurityControlIdentifiers"))
         .enabledSecurityControlIdentifiers(List.of("enabledSecurityControlIdentifiers"))
         .securityControlCustomParameters(List.of(SecurityControlCustomParameterProperty.builder()
                 .parameters(Map.of(
                         "parametersKey", ParameterConfigurationProperty.builder()
                                 .valueType("valueType")
                                 // the properties below are optional
                                 .value(ParameterValueProperty.builder()
                                         .boolean(false)
                                         .double(123)
                                         .enum("enum")
                                         .enumList(List.of("enumList"))
                                         .integer(123)
                                         .integerList(List.of(123))
                                         .string("string")
                                         .stringList(List.of("stringList"))
                                         .build())
                                 .build()))
                 .securityControlId("securityControlId")
                 .build()))
         .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnConfigurationPolicy.SecurityControlsConfigurationProperty.Builder	A builder for CfnConfigurationPolicy.SecurityControlsConfigurationProperty
static final class	CfnConfigurationPolicy.SecurityControlsConfigurationProperty.Jsii$Proxy	An implementation for CfnConfigurationPolicy.SecurityControlsConfigurationProperty

Method Summary

Modifier and Type	Method	Description
static CfnConfigurationPolicy.SecurityControlsConfigurationProperty.Builder	builder()
default List<String>	getDisabledSecurityControlIdentifiers()	A list of security controls that are disabled in the configuration policy.
default List<String>	getEnabledSecurityControlIdentifiers()	A list of security controls that are enabled in the configuration policy.
default Object	getSecurityControlCustomParameters()	A list of security controls and control parameter values that are included in a configuration policy.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getDisabledSecurityControlIdentifiers

@Stability(Stable)
@Nullable
default List<String> getDisabledSecurityControlIdentifiers()

A list of security controls that are disabled in the configuration policy.

Provide only one of EnabledSecurityControlIdentifiers or DisabledSecurityControlIdentifiers .

If you provide DisabledSecurityControlIdentifiers , Security Hub enables all other controls not in the list, and enables AutoEnableControls .

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html#cfn-securityhub-configurationpolicy-securitycontrolsconfiguration-disabledsecuritycontrolidentifiers

getEnabledSecurityControlIdentifiers

@Stability(Stable)
@Nullable
default List<String> getEnabledSecurityControlIdentifiers()

A list of security controls that are enabled in the configuration policy.

Provide only one of EnabledSecurityControlIdentifiers or DisabledSecurityControlIdentifiers .

If you provide EnabledSecurityControlIdentifiers , Security Hub disables all other controls not in the list, and disables AutoEnableControls .

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html#cfn-securityhub-configurationpolicy-securitycontrolsconfiguration-enabledsecuritycontrolidentifiers

getSecurityControlCustomParameters

@Stability(Stable)
@Nullable
default Object getSecurityControlCustomParameters()

A list of security controls and control parameter values that are included in a configuration policy.

Returns union: either IResolvable or Listinvalid input: '<'either IResolvable or CfnConfigurationPolicy.SecurityControlCustomParameterProperty>

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html#cfn-securityhub-configurationpolicy-securitycontrolsconfiguration-securitycontrolcustomparameters

builder

@Stability(Stable)
static CfnConfigurationPolicy.SecurityControlsConfigurationProperty.Builder builder()

Returns:

a CfnConfigurationPolicy.SecurityControlsConfigurationProperty.Builder of CfnConfigurationPolicy.SecurityControlsConfigurationProperty