/AWS1/CL_SHBDESCRORGCONFRSP

DescribeOrganizationConfigurationResponse

CONSTRUCTOR

IMPORTING

Optional arguments:

iv_autoenable TYPE /AWS1/SHBBOOLEAN /AWS1/SHBBOOLEAN

Whether to automatically enable Security Hub in new member accounts when they join the organization.

If set to true, then Security Hub is automatically enabled in new accounts. If set to false, then Security Hub isn't enabled in new accounts automatically. The default value is false.

If the ConfigurationType of your organization is set to CENTRAL, then this field is set to false and can't be changed in the home Region and linked Regions. However, in that case, the delegated administrator can create a configuration policy in which Security Hub is enabled and associate the policy with new organization accounts.

iv_memberaccountlimitreached TYPE /AWS1/SHBBOOLEAN /AWS1/SHBBOOLEAN

Whether the maximum number of allowed member accounts are already associated with the Security Hub administrator account.

iv_autoenablestandards TYPE /AWS1/SHBAUTOENABLESTANDARDS /AWS1/SHBAUTOENABLESTANDARDS

Whether to automatically enable Security Hub default standards in new member accounts when they join the organization.

If equal to DEFAULT, then Security Hub default standards are automatically enabled for new member accounts. If equal to NONE, then default standards are not automatically enabled for new member accounts. The default value of this parameter is equal to DEFAULT.

If the ConfigurationType of your organization is set to CENTRAL, then this field is set to NONE and can't be changed in the home Region and linked Regions. However, in that case, the delegated administrator can create a configuration policy in which specific security standards are enabled and associate the policy with new organization accounts.

io_organizationconfiguration TYPE REF TO /AWS1/CL_SHBORGANIZATIONCONF /AWS1/CL_SHBORGANIZATIONCONF

OrganizationConfiguration

---

Queryable Attributes

AutoEnable

Whether to automatically enable Security Hub in new member accounts when they join the organization.

If set to true, then Security Hub is automatically enabled in new accounts. If set to false, then Security Hub isn't enabled in new accounts automatically. The default value is false.

If the ConfigurationType of your organization is set to CENTRAL, then this field is set to false and can't be changed in the home Region and linked Regions. However, in that case, the delegated administrator can create a configuration policy in which Security Hub is enabled and associate the policy with new organization accounts.

Accessible with the following methods

Method	Description
GET_AUTOENABLE()	Getter for AUTOENABLE, with configurable default
ASK_AUTOENABLE()	Getter for AUTOENABLE w/ exceptions if field has no value
HAS_AUTOENABLE()	Determine if AUTOENABLE has a value

MemberAccountLimitReached

Whether the maximum number of allowed member accounts are already associated with the Security Hub administrator account.

Accessible with the following methods

Method	Description
GET_MEMBERACCTLIMITREACHED()	Getter for MEMBERACCOUNTLIMITREACHED, with configurable defa
ASK_MEMBERACCTLIMITREACHED()	Getter for MEMBERACCOUNTLIMITREACHED w/ exceptions if field
HAS_MEMBERACCTLIMITREACHED()	Determine if MEMBERACCOUNTLIMITREACHED has a value

AutoEnableStandards

Whether to automatically enable Security Hub default standards in new member accounts when they join the organization.

If equal to DEFAULT, then Security Hub default standards are automatically enabled for new member accounts. If equal to NONE, then default standards are not automatically enabled for new member accounts. The default value of this parameter is equal to DEFAULT.

If the ConfigurationType of your organization is set to CENTRAL, then this field is set to NONE and can't be changed in the home Region and linked Regions. However, in that case, the delegated administrator can create a configuration policy in which specific security standards are enabled and associate the policy with new organization accounts.

Accessible with the following methods

Method	Description
GET_AUTOENABLESTANDARDS()	Getter for AUTOENABLESTANDARDS, with configurable default
ASK_AUTOENABLESTANDARDS()	Getter for AUTOENABLESTANDARDS w/ exceptions if field has no
HAS_AUTOENABLESTANDARDS()	Determine if AUTOENABLESTANDARDS has a value

OrganizationConfiguration

OrganizationConfiguration

Accessible with the following methods

Method	Description
GET_ORGANIZATIONCONF()	Getter for ORGANIZATIONCONFIGURATION