Package software.amazon.awscdk.services.securityhub

Interface CfnOrganizationConfigurationProps

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnOrganizationConfigurationProps.Jsii$Proxy

@Generated(value="jsii-pacmak/1.119.0 (build 1634eac)",
           date="2025-11-13T16:10:14.234Z")
@Stability(Stable)
public interface CfnOrganizationConfigurationProps
extends software.amazon.jsii.JsiiSerializable

Properties for defining a CfnOrganizationConfiguration.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.securityhub.*;
 CfnOrganizationConfigurationProps cfnOrganizationConfigurationProps = CfnOrganizationConfigurationProps.builder()
         .autoEnable(false)
         // the properties below are optional
         .autoEnableStandards("autoEnableStandards")
         .configurationType("configurationType")
         .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-organizationconfiguration.html

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnOrganizationConfigurationProps.Builder	A builder for CfnOrganizationConfigurationProps
static final class	CfnOrganizationConfigurationProps.Jsii$Proxy	An implementation for CfnOrganizationConfigurationProps

Method Summary

Modifier and Type	Method	Description
static CfnOrganizationConfigurationProps.Builder	builder()
Object	getAutoEnable()	Whether to automatically enable Security Hub in new member accounts when they join the organization.
default String	getAutoEnableStandards()	Whether to automatically enable Security Hub default standards in new member accounts when they join the organization.
default String	getConfigurationType()	Indicates whether the organization uses local or central configuration.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getAutoEnable

@Stability(Stable)
@NotNull
Object getAutoEnable()

Whether to automatically enable Security Hub in new member accounts when they join the organization.

If set to true , then Security Hub is automatically enabled in new accounts. If set to false , then Security Hub isn't enabled in new accounts automatically. The default value is false .

If the ConfigurationType of your organization is set to CENTRAL , then this field is set to false and can't be changed in the home Region and linked Regions. However, in that case, the delegated administrator can create a configuration policy in which Security Hub is enabled and associate the policy with new organization accounts.

Returns union: either Boolean or IResolvable

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-organizationconfiguration.html#cfn-securityhub-organizationconfiguration-autoenable

getAutoEnableStandards

@Stability(Stable)
@Nullable
default String getAutoEnableStandards()

Whether to automatically enable Security Hub default standards in new member accounts when they join the organization.

The default value of this parameter is equal to DEFAULT .

If equal to DEFAULT , then Security Hub default standards are automatically enabled for new member accounts. If equal to NONE , then default standards are not automatically enabled for new member accounts.

If the ConfigurationType of your organization is set to CENTRAL , then this field is set to NONE and can't be changed in the home Region and linked Regions. However, in that case, the delegated administrator can create a configuration policy in which specific security standards are enabled and associate the policy with new organization accounts.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-organizationconfiguration.html#cfn-securityhub-organizationconfiguration-autoenablestandards

getConfigurationType

@Stability(Stable)
@Nullable
default String getConfigurationType()

Indicates whether the organization uses local or central configuration.

If you use local configuration, the Security Hub delegated administrator can set AutoEnable to true and AutoEnableStandards to DEFAULT . This automatically enables Security Hub and default security standards in new organization accounts. These new account settings must be set separately in each AWS Region , and settings may be different in each Region.

If you use central configuration, the delegated administrator can create configuration policies. Configuration policies can be used to configure Security Hub, security standards, and security controls in multiple accounts and Regions. If you want new organization accounts to use a specific configuration, you can create a configuration policy and associate it with the root or specific organizational units (OUs). New accounts will inherit the policy from the root or their assigned OU.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-organizationconfiguration.html#cfn-securityhub-organizationconfiguration-configurationtype

builder

@Stability(Stable)
static CfnOrganizationConfigurationProps.Builder builder()

Returns:

a CfnOrganizationConfigurationProps.Builder of CfnOrganizationConfigurationProps