CfnHubLogsMixin

class aws_cdk.mixins_preview.aws_securityhub.mixins.CfnHubLogsMixin(log_type, log_delivery)

Bases: Mixin

The AWS::SecurityHub::Hub resource specifies the enablement of the AWS Security Hub CSPM service in your AWS account .

The service is enabled in the current AWS Region or the specified Region. You create a separate Hub resource in each Region in which you want to enable Security Hub CSPM .

When you use this resource to enable Security Hub CSPM , default security standards are enabled. To disable default standards, set the EnableDefaultStandards property to false . You can use the `AWS::SecurityHub::Standard <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html>`_ resource to enable additional standards.

When you use this resource to enable Security Hub CSPM , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the AutoEnableControls property to false .

You must create an AWS::SecurityHub::Hub resource for an account before you can create other types of Security Hub CSPM resources for the account through CloudFormation . Use a DependsOn attribute , such as "DependsOn": "Hub" , to ensure that you’ve created an AWS::SecurityHub::Hub resource before creating other Security Hub CSPM resources for an account.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html

CloudformationResource:

AWS::SecurityHub::Hub

Mixin:

true

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview import aws_logs as logs
from aws_cdk.mixins_preview.aws_securityhub import mixins as securityhub_mixins

# logs_delivery: logs.ILogsDelivery

cfn_hub_logs_mixin = securityhub_mixins.CfnHubLogsMixin("logType", logs_delivery)

Create a mixin to enable vended logs for AWS::SecurityHub::Hub.

Parameters:
  • log_type (str) – Type of logs that are getting vended.

  • log_delivery (ILogsDelivery) – Object in charge of setting up the delivery source, delivery destination, and delivery connection.

Methods

apply_to(resource)

Apply vended logs configuration to the construct.

Parameters:

resource (IConstruct)

Return type:

None

supports(construct)

Check if this mixin supports the given construct (has vendedLogs property).

Parameters:

construct (IConstruct)

Return type:

bool

Attributes

SECURITY_FINDING_LOGS = <aws_cdk.mixins_preview.aws_securityhub.mixins.CfnHubSecurityFindingLogs object>

Static Methods

classmethod is_mixin(x)

Checks if x is a Mixin.

Parameters:

x (Any) – Any object.

Return type:

bool

Returns:

true if x is an object created from a class which extends Mixin.