CfnConfigurationPolicyMixinProps

class aws_cdk.mixins_preview.aws_securityhub.mixins.CfnConfigurationPolicyMixinProps(*, configuration_policy=None, description=None, name=None, tags=None)

Bases: object

Properties for CfnConfigurationPolicyPropsMixin.

Parameters:

configuration_policy (Union[IResolvable, PolicyProperty, Dict[str, Any], None]) – An object that defines how Security Hub is configured. It includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls).
description (Optional[str]) – The description of the configuration policy.
name (Optional[str]) – The name of the configuration policy. Alphanumeric characters and the following ASCII characters are permitted: -, ., !, *, / .
tags (Optional[Mapping[str, str]]) – User-defined tags associated with a configuration policy. For more information, see Tagging Security Hub resources in the Security Hub user guide .

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_securityhub import mixins as securityhub_mixins

cfn_configuration_policy_mixin_props = securityhub_mixins.CfnConfigurationPolicyMixinProps(
    configuration_policy=securityhub_mixins.CfnConfigurationPolicyPropsMixin.PolicyProperty(
        security_hub=securityhub_mixins.CfnConfigurationPolicyPropsMixin.SecurityHubPolicyProperty(
            enabled_standard_identifiers=["enabledStandardIdentifiers"],
            security_controls_configuration=securityhub_mixins.CfnConfigurationPolicyPropsMixin.SecurityControlsConfigurationProperty(
                disabled_security_control_identifiers=["disabledSecurityControlIdentifiers"],
                enabled_security_control_identifiers=["enabledSecurityControlIdentifiers"],
                security_control_custom_parameters=[securityhub_mixins.CfnConfigurationPolicyPropsMixin.SecurityControlCustomParameterProperty(
                    parameters={
                        "parameters_key": securityhub_mixins.CfnConfigurationPolicyPropsMixin.ParameterConfigurationProperty(
                            value=securityhub_mixins.CfnConfigurationPolicyPropsMixin.ParameterValueProperty(
                                boolean=False,
                                double=123,
                                enum="enum",
                                enum_list=["enumList"],
                                integer=123,
                                integer_list=[123],
                                string="string",
                                string_list=["stringList"]
                            ),
                            value_type="valueType"
                        )
                    },
                    security_control_id="securityControlId"
                )]
            ),
            service_enabled=False
        )
    ),
    description="description",
    name="name",
    tags={
        "tags_key": "tags"
    }
)

Attributes

configuration_policy

An object that defines how Security Hub is configured.

It includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls).

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html#cfn-securityhub-configurationpolicy-configurationpolicy

description

The description of the configuration policy.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html#cfn-securityhub-configurationpolicy-description

name

The name of the configuration policy.

Alphanumeric characters and the following ASCII characters are permitted: -, ., !, *, / .

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html#cfn-securityhub-configurationpolicy-name

tags

User-defined tags associated with a configuration policy.

For more information, see Tagging Security Hub resources in the Security Hub user guide .

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html#cfn-securityhub-configurationpolicy-tags