@propulsionworks/cloudformation 0.1.38 → 0.1.39
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/out/exports/resources.generated/aws-arcregionswitch-plan.d.ts +3 -3
- package/out/exports/resources.generated/aws-backup-backupplan.d.ts +1 -0
- package/out/exports/resources.generated/aws-backup-logicallyairgappedbackupvault.d.ts +3 -0
- package/out/exports/resources.generated/aws-bedrock-dataautomationproject.d.ts +78 -0
- package/out/exports/resources.generated/aws-bedrock-knowledgebase.d.ts +57 -3
- package/out/exports/resources.generated/aws-billingconductor-customlineitem.d.ts +11 -5
- package/out/exports/resources.generated/aws-ce-costcategory.d.ts +1 -1
- package/out/exports/resources.generated/aws-cleanrooms-analysistemplate.d.ts +71 -0
- package/out/exports/resources.generated/aws-cleanrooms-collaboration.d.ts +16 -0
- package/out/exports/resources.generated/aws-cleanrooms-membership.d.ts +16 -0
- package/out/exports/resources.generated/aws-cloudfront-anycastiplist.d.ts +20 -0
- package/out/exports/resources.generated/aws-config-configurationrecorder.d.ts +1 -1
- package/out/exports/resources.generated/aws-connect-datatable.d.ts +13 -13
- package/out/exports/resources.generated/aws-connect-datatableattribute.d.ts +12 -2
- package/out/exports/resources.generated/aws-connect-datatablerecord.d.ts +4 -0
- package/out/exports/resources.generated/aws-connect-evaluationform.d.ts +23 -11
- package/out/exports/resources.generated/aws-connect-securityprofile.d.ts +10 -9
- package/out/exports/resources.generated/aws-connect-workspace.d.ts +348 -0
- package/out/exports/resources.generated/aws-connectcampaignsv2-campaign.d.ts +107 -1
- package/out/exports/resources.generated/aws-customerprofiles-segmentdefinition.d.ts +5 -1
- package/out/exports/resources.generated/aws-datazone-connection.d.ts +19 -1
- package/out/exports/resources.generated/aws-devopsagent-agentspace.d.ts +6 -6
- package/out/exports/resources.generated/aws-devopsagent-association.d.ts +82 -73
- package/out/exports/resources.generated/aws-dsql-cluster.d.ts +5 -0
- package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +7 -0
- package/out/exports/resources.generated/aws-ec2-networkinterface.d.ts +5 -0
- package/out/exports/resources.generated/aws-ec2-spotfleet.d.ts +12 -0
- package/out/exports/resources.generated/aws-ecs-expressgatewayservice.d.ts +48 -0
- package/out/exports/resources.generated/aws-eks-capability.d.ts +27 -15
- package/out/exports/resources.generated/aws-eks-nodegroup.d.ts +58 -0
- package/out/exports/resources.generated/aws-entityresolution-matchingworkflow.d.ts +18 -1
- package/out/exports/resources.generated/aws-fsx-s3accesspointattachment.d.ts +115 -1
- package/out/exports/resources.generated/aws-glue-connection.d.ts +0 -23
- package/out/exports/resources.generated/aws-glue-identitycenterconfiguration.d.ts +6 -6
- package/out/exports/resources.generated/aws-imagebuilder-component.d.ts +11 -5
- package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +5 -13
- package/out/exports/resources.generated/aws-imagebuilder-image.d.ts +17 -21
- package/out/exports/resources.generated/aws-imagebuilder-imagepipeline.d.ts +1 -1
- package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +11 -5
- package/out/exports/resources.generated/aws-imagebuilder-workflow.d.ts +4 -4
- package/out/exports/resources.generated/aws-lambda-capacityprovider.d.ts +23 -23
- package/out/exports/resources.generated/aws-lambda-function.d.ts +11 -3
- package/out/exports/resources.generated/aws-lambda-permission.d.ts +1 -1
- package/out/exports/resources.generated/aws-macie-session.d.ts +1 -1
- package/out/exports/resources.generated/aws-msk-cluster.d.ts +8 -0
- package/out/exports/resources.generated/aws-networkmanager-connectattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-corenetworkprefixlistassociation.d.ts +29 -0
- package/out/exports/resources.generated/aws-networkmanager-directconnectgatewayattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-sitetositevpnattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-transitgatewayroutetableattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-vpcattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-observabilityadmin-organizationtelemetryrule.d.ts +271 -3
- package/out/exports/resources.generated/aws-observabilityadmin-s3tableintegration.d.ts +3 -3
- package/out/exports/resources.generated/aws-observabilityadmin-telemetrypipelines.d.ts +2 -0
- package/out/exports/resources.generated/aws-observabilityadmin-telemetryrule.d.ts +282 -4
- package/out/exports/resources.generated/aws-opensearchservice-application.d.ts +1 -1
- package/out/exports/resources.generated/aws-organizations-policy.d.ts +1 -1
- package/out/exports/resources.generated/aws-paymentcryptography-key.d.ts +7 -0
- package/out/exports/resources.generated/aws-ram-resourceshare.d.ts +27 -0
- package/out/exports/resources.generated/aws-route53-hostedzone.d.ts +16 -0
- package/out/exports/resources.generated/aws-route53profiles-profile.d.ts +5 -0
- package/out/exports/resources.generated/aws-s3tables-table.d.ts +3 -3
- package/out/exports/resources.generated/aws-s3tables-tablebucket.d.ts +3 -3
- package/out/exports/resources.generated/aws-s3vectors-index.d.ts +28 -0
- package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +8 -2
- package/out/exports/resources.generated/aws-securityhub-aggregatorv2.d.ts +2 -2
- package/out/exports/resources.generated/aws-securityhub-automationrule.d.ts +32 -32
- package/out/exports/resources.generated/aws-securityhub-automationrulev2.d.ts +14 -14
- package/out/exports/resources.generated/aws-securityhub-configurationpolicy.d.ts +12 -12
- package/out/exports/resources.generated/aws-securityhub-connectorv2.d.ts +24 -18
- package/out/exports/resources.generated/aws-securityhub-delegatedadmin.d.ts +5 -5
- package/out/exports/resources.generated/aws-securityhub-findingaggregator.d.ts +4 -4
- package/out/exports/resources.generated/aws-securityhub-hub.d.ts +14 -14
- package/out/exports/resources.generated/aws-securityhub-hubv2.d.ts +3 -3
- package/out/exports/resources.generated/aws-securityhub-insight.d.ts +29 -29
- package/out/exports/resources.generated/aws-securityhub-organizationconfiguration.d.ts +10 -10
- package/out/exports/resources.generated/aws-securityhub-policyassociation.d.ts +3 -3
- package/out/exports/resources.generated/aws-securityhub-productsubscription.d.ts +2 -2
- package/out/exports/resources.generated/aws-securityhub-securitycontrol.d.ts +0 -0
- package/out/exports/resources.generated/aws-securityhub-standard.d.ts +6 -6
- package/out/exports/resources.generated/aws-transfer-connector.d.ts +6 -0
- package/out/exports/resources.generated/aws-wisdom-aiagent.d.ts +15 -0
- package/out/exports/resources.generated/aws-wisdom-aiguardrail.d.ts +118 -1
- package/out/exports/resources.generated/aws-workspacesweb-usersettings.d.ts +86 -0
- package/package.json +1 -1
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated Security Hub administrator account for an organization. You must enable the integration between Security Hub and AWS Organizations before you can designate a delegated Security Hub administrator. Only the management account for an organization can designate the delegated Security Hub administrator account. For more information, see [Designating the delegated Security Hub administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *Security Hub User Guide* .
|
|
3
|
+
* The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated AWS Security Hub CSPM administrator account for an organization. You must enable the integration between Security Hub CSPM and AWS Organizations before you can designate a delegated Security Hub CSPM administrator. Only the management account for an organization can designate the delegated Security Hub CSPM administrator account. For more information, see [Designating the delegated Security Hub CSPM administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *AWS Security Hub CSPM User Guide* .
|
|
4
4
|
*
|
|
5
5
|
* To change the delegated administrator account, remove the current delegated administrator account, and then designate the new account.
|
|
6
6
|
*
|
|
@@ -11,7 +11,7 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
|
11
11
|
*/
|
|
12
12
|
export type SecurityHubDelegatedAdmin = ResourceDefinitionWithAttributes<"AWS::SecurityHub::DelegatedAdmin", SecurityHubDelegatedAdminProps, SecurityHubDelegatedAdminAttribs>;
|
|
13
13
|
/**
|
|
14
|
-
* The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated Security Hub administrator account for an organization. You must enable the integration between Security Hub and AWS Organizations before you can designate a delegated Security Hub administrator. Only the management account for an organization can designate the delegated Security Hub administrator account. For more information, see [Designating the delegated Security Hub administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *Security Hub User Guide* .
|
|
14
|
+
* The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated AWS Security Hub CSPM administrator account for an organization. You must enable the integration between Security Hub CSPM and AWS Organizations before you can designate a delegated Security Hub CSPM administrator. Only the management account for an organization can designate the delegated Security Hub CSPM administrator account. For more information, see [Designating the delegated Security Hub CSPM administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *AWS Security Hub CSPM User Guide* .
|
|
15
15
|
*
|
|
16
16
|
* To change the delegated administrator account, remove the current delegated administrator account, and then designate the new account.
|
|
17
17
|
*
|
|
@@ -22,7 +22,7 @@ export type SecurityHubDelegatedAdmin = ResourceDefinitionWithAttributes<"AWS::S
|
|
|
22
22
|
*/
|
|
23
23
|
export type SecurityHubDelegatedAdminProps = {
|
|
24
24
|
/**
|
|
25
|
-
* The AWS account identifier of the account to designate as the Security Hub administrator account.
|
|
25
|
+
* The AWS account identifier of the account to designate as the Security Hub CSPM administrator account.
|
|
26
26
|
* @pattern ^[0-9]{12}$
|
|
27
27
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-delegatedadmin.html#cfn-securityhub-delegatedadmin-adminaccountid}
|
|
28
28
|
*/
|
|
@@ -33,13 +33,13 @@ export type SecurityHubDelegatedAdminProps = {
|
|
|
33
33
|
*/
|
|
34
34
|
export type SecurityHubDelegatedAdminAttribs = {
|
|
35
35
|
/**
|
|
36
|
-
* The ID of the delegated Security Hub administrator account, in the format of `accountID/Region` .
|
|
36
|
+
* The ID of the delegated Security Hub CSPM administrator account, in the format of `accountID/Region` .
|
|
37
37
|
* @pattern ^[0-9]{12}/[a-zA-Z0-9-]{1,32}$
|
|
38
38
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-delegatedadmin.html#cfn-securityhub-delegatedadmin-delegatedadminidentifier}
|
|
39
39
|
*/
|
|
40
40
|
DelegatedAdminIdentifier: string;
|
|
41
41
|
/**
|
|
42
|
-
* Whether the delegated Security Hub administrator is set for the organization.
|
|
42
|
+
* Whether the delegated Security Hub CSPM administrator is set for the organization.
|
|
43
43
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-delegatedadmin.html#cfn-securityhub-delegatedadmin-status}
|
|
44
44
|
*/
|
|
45
45
|
Status: "ENABLED" | "DISABLE_IN_PROGRESS";
|
|
@@ -1,19 +1,19 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *Security Hub User Guide*
|
|
3
|
+
* The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *AWS Security Hub CSPM User Guide*
|
|
4
4
|
*
|
|
5
5
|
* This resource must be created in the Region that you want to designate as your aggregation Region.
|
|
6
6
|
*
|
|
7
|
-
* Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub .
|
|
7
|
+
* Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub CSPM .
|
|
8
8
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-findingaggregator.html}
|
|
9
9
|
*/
|
|
10
10
|
export type SecurityHubFindingAggregator = ResourceDefinitionWithAttributes<"AWS::SecurityHub::FindingAggregator", SecurityHubFindingAggregatorProps, SecurityHubFindingAggregatorAttribs>;
|
|
11
11
|
/**
|
|
12
|
-
* The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *Security Hub User Guide*
|
|
12
|
+
* The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *AWS Security Hub CSPM User Guide*
|
|
13
13
|
*
|
|
14
14
|
* This resource must be created in the Region that you want to designate as your aggregation Region.
|
|
15
15
|
*
|
|
16
|
-
* Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub .
|
|
16
|
+
* Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub CSPM .
|
|
17
17
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-findingaggregator.html}
|
|
18
18
|
*/
|
|
19
19
|
export type SecurityHubFindingAggregatorProps = {
|
|
@@ -1,23 +1,23 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::Hub` resource specifies the enablement of the Security Hub service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub .
|
|
3
|
+
* The `AWS::SecurityHub::Hub` resource specifies the enablement of the AWS Security Hub CSPM service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub CSPM .
|
|
4
4
|
*
|
|
5
|
-
* When you use this resource to enable Security Hub , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
|
|
5
|
+
* When you use this resource to enable Security Hub CSPM , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
|
|
6
6
|
*
|
|
7
|
-
* When you use this resource to enable Security Hub , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
|
|
7
|
+
* When you use this resource to enable Security Hub CSPM , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
|
|
8
8
|
*
|
|
9
|
-
* You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub resources for an account.
|
|
9
|
+
* You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub CSPM resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub CSPM resources for an account.
|
|
10
10
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html}
|
|
11
11
|
*/
|
|
12
12
|
export type SecurityHubHub = ResourceDefinitionWithAttributes<"AWS::SecurityHub::Hub", SecurityHubHubProps, SecurityHubHubAttribs>;
|
|
13
13
|
/**
|
|
14
|
-
* The `AWS::SecurityHub::Hub` resource specifies the enablement of the Security Hub service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub .
|
|
14
|
+
* The `AWS::SecurityHub::Hub` resource specifies the enablement of the AWS Security Hub CSPM service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub CSPM .
|
|
15
15
|
*
|
|
16
|
-
* When you use this resource to enable Security Hub , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
|
|
16
|
+
* When you use this resource to enable Security Hub CSPM , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
|
|
17
17
|
*
|
|
18
|
-
* When you use this resource to enable Security Hub , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
|
|
18
|
+
* When you use this resource to enable Security Hub CSPM , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
|
|
19
19
|
*
|
|
20
|
-
* You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub resources for an account.
|
|
20
|
+
* You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub CSPM resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub CSPM resources for an account.
|
|
21
21
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html}
|
|
22
22
|
*/
|
|
23
23
|
export type SecurityHubHubProps = {
|
|
@@ -26,22 +26,22 @@ export type SecurityHubHubProps = {
|
|
|
26
26
|
*
|
|
27
27
|
* By default, this is set to `true` , and new controls are enabled automatically. To not automatically enable new controls, set this to `false` .
|
|
28
28
|
*
|
|
29
|
-
* When you automatically enable new controls, you can interact with the controls in the console and programmatically immediately after release. However, automatically enabled controls have a temporary default status of `DISABLED` . It can take up to several days for Security Hub to process the control release and designate the control as `ENABLED` in your account. During the processing period, you can manually enable or disable a control, and Security Hub will maintain that designation regardless of whether you have `AutoEnableControls` set to `true` .
|
|
29
|
+
* When you automatically enable new controls, you can interact with the controls in the console and programmatically immediately after release. However, automatically enabled controls have a temporary default status of `DISABLED` . It can take up to several days for Security Hub CSPM to process the control release and designate the control as `ENABLED` in your account. During the processing period, you can manually enable or disable a control, and Security Hub CSPM will maintain that designation regardless of whether you have `AutoEnableControls` set to `true` .
|
|
30
30
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-autoenablecontrols}
|
|
31
31
|
*/
|
|
32
32
|
AutoEnableControls?: boolean | undefined;
|
|
33
33
|
/**
|
|
34
|
-
* Specifies whether an account has consolidated control findings turned on or off. If the value for this field is set to `SECURITY_CONTROL` , Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards.
|
|
34
|
+
* Specifies whether an account has consolidated control findings turned on or off. If the value for this field is set to `SECURITY_CONTROL` , Security Hub CSPM generates a single finding for a control check even when the check applies to multiple enabled standards.
|
|
35
35
|
*
|
|
36
|
-
* If the value for this field is set to `STANDARD_CONTROL` , Security Hub generates separate findings for a control check when the check applies to multiple enabled standards.
|
|
36
|
+
* If the value for this field is set to `STANDARD_CONTROL` , Security Hub CSPM generates separate findings for a control check when the check applies to multiple enabled standards.
|
|
37
37
|
*
|
|
38
|
-
* The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is `SECURITY_CONTROL` if you enabled Security Hub on or after February 23, 2023.
|
|
38
|
+
* The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is `SECURITY_CONTROL` if you enabled Security Hub CSPM on or after February 23, 2023.
|
|
39
39
|
* @pattern ^(SECURITY_CONTROL|STANDARD_CONTROL)$
|
|
40
40
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-controlfindinggenerator}
|
|
41
41
|
*/
|
|
42
42
|
ControlFindingGenerator?: string | undefined;
|
|
43
43
|
/**
|
|
44
|
-
* Whether to enable the security standards that Security Hub has designated as automatically enabled. If you don't provide a value for `EnableDefaultStandards` , it is set to `true` , and the designated standards are automatically enabled in each AWS Region where you enable Security Hub . If you don't want to enable the designated standards, set `EnableDefaultStandards` to `false` .
|
|
44
|
+
* Whether to enable the security standards that Security Hub CSPM has designated as automatically enabled. If you don't provide a value for `EnableDefaultStandards` , it is set to `true` , and the designated standards are automatically enabled in each AWS Region where you enable Security Hub CSPM . If you don't want to enable the designated standards, set `EnableDefaultStandards` to `false` .
|
|
45
45
|
*
|
|
46
46
|
* Currently, the automatically enabled standards are the Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0 and AWS Foundational Security Best Practices (FSBP).
|
|
47
47
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-enabledefaultstandards}
|
|
@@ -66,7 +66,7 @@ export type SecurityHubHubAttribs = {
|
|
|
66
66
|
*/
|
|
67
67
|
ARN: string;
|
|
68
68
|
/**
|
|
69
|
-
* The date and time when Security Hub was enabled in your account.
|
|
69
|
+
* The date and time when Security Hub CSPM was enabled in your account.
|
|
70
70
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-subscribedat}
|
|
71
71
|
*/
|
|
72
72
|
SubscribedAt: string;
|
|
@@ -1,16 +1,16 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Returns details about the service resource in your account.
|
|
3
|
+
* Returns details about the service resource in your account.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SecurityHubHubV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::HubV2", SecurityHubHubV2Props, SecurityHubHubV2Attribs>;
|
|
7
7
|
/**
|
|
8
|
-
* Returns details about the service resource in your account.
|
|
8
|
+
* Returns details about the service resource in your account.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SecurityHubHubV2Props = {
|
|
12
12
|
/**
|
|
13
|
-
* The tags to add to the hub V2 resource when you enable Security Hub.
|
|
13
|
+
* The tags to add to the hub V2 resource when you enable Security Hub CSPM.
|
|
14
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html#cfn-securityhub-hubv2-tags}
|
|
15
15
|
*/
|
|
16
16
|
Tags?: Record<string, string> | undefined;
|
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::Insight` resource creates a custom insight in Security Hub . An insight is a collection of findings that relate to a security issue that requires attention or remediation. For more information, see [Insights in Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-insights.html) in the *Security Hub User Guide* .
|
|
3
|
+
* The `AWS::SecurityHub::Insight` resource creates a custom insight in AWS Security Hub CSPM . An insight is a collection of findings that relate to a security issue that requires attention or remediation. For more information, see [Insights in AWS Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-insights.html) in the *AWS Security Hub CSPM User Guide* .
|
|
4
4
|
*
|
|
5
5
|
* Tags aren't supported for this resource.
|
|
6
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-insight.html}
|
|
7
7
|
*/
|
|
8
8
|
export type SecurityHubInsight = ResourceDefinitionWithAttributes<"AWS::SecurityHub::Insight", SecurityHubInsightProps, SecurityHubInsightAttribs>;
|
|
9
9
|
/**
|
|
10
|
-
* The `AWS::SecurityHub::Insight` resource creates a custom insight in Security Hub . An insight is a collection of findings that relate to a security issue that requires attention or remediation. For more information, see [Insights in Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-insights.html) in the *Security Hub User Guide* .
|
|
10
|
+
* The `AWS::SecurityHub::Insight` resource creates a custom insight in AWS Security Hub CSPM . An insight is a collection of findings that relate to a security issue that requires attention or remediation. For more information, see [Insights in AWS Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-insights.html) in the *AWS Security Hub CSPM User Guide* .
|
|
11
11
|
*
|
|
12
12
|
* Tags aren't supported for this resource.
|
|
13
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-insight.html}
|
|
@@ -24,7 +24,7 @@ export type SecurityHubInsightProps = {
|
|
|
24
24
|
*/
|
|
25
25
|
GroupByAttribute: string;
|
|
26
26
|
/**
|
|
27
|
-
* The name of a Security Hub insight.
|
|
27
|
+
* The name of a Security Hub CSPM insight.
|
|
28
28
|
* @minLength 1
|
|
29
29
|
* @maxLength 128
|
|
30
30
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-insight.html#cfn-securityhub-insight-name}
|
|
@@ -36,14 +36,14 @@ export type SecurityHubInsightProps = {
|
|
|
36
36
|
*/
|
|
37
37
|
export type SecurityHubInsightAttribs = {
|
|
38
38
|
/**
|
|
39
|
-
* The ARN of a Security Hub insight.
|
|
39
|
+
* The ARN of a Security Hub CSPM insight.
|
|
40
40
|
* @pattern arn:aws\S*:securityhub:\S*
|
|
41
41
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-insight.html#cfn-securityhub-insight-insightarn}
|
|
42
42
|
*/
|
|
43
43
|
InsightArn: string;
|
|
44
44
|
};
|
|
45
45
|
/**
|
|
46
|
-
* A collection of filters that are applied to all active findings aggregated by Security Hub .
|
|
46
|
+
* A collection of filters that are applied to all active findings aggregated by AWS Security Hub CSPM .
|
|
47
47
|
*
|
|
48
48
|
* You can filter by up to ten finding attributes. For each attribute, you can provide up to 20 filter values.
|
|
49
49
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html}
|
|
@@ -99,7 +99,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
99
99
|
/**
|
|
100
100
|
* A timestamp that indicates when the security findings provider created the potential security issue that a finding reflects.
|
|
101
101
|
*
|
|
102
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
102
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
103
103
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-createdat}
|
|
104
104
|
*/
|
|
105
105
|
CreatedAt?: DateFilter[] | undefined;
|
|
@@ -159,7 +159,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
159
159
|
/**
|
|
160
160
|
* A timestamp that indicates when the security findings provider first observed the potential security issue that a finding captured.
|
|
161
161
|
*
|
|
162
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
162
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
163
163
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-firstobservedat}
|
|
164
164
|
*/
|
|
165
165
|
FirstObservedAt?: DateFilter[] | undefined;
|
|
@@ -181,7 +181,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
181
181
|
/**
|
|
182
182
|
* A timestamp that indicates when the security findings provider most recently observed a change in the resource that is involved in the finding.
|
|
183
183
|
*
|
|
184
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
184
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
185
185
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-lastobservedat}
|
|
186
186
|
*/
|
|
187
187
|
LastObservedAt?: DateFilter[] | undefined;
|
|
@@ -278,7 +278,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
278
278
|
/**
|
|
279
279
|
* A timestamp that identifies when the process was launched.
|
|
280
280
|
*
|
|
281
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
281
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
282
282
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-processlaunchedat}
|
|
283
283
|
*/
|
|
284
284
|
ProcessLaunchedAt?: DateFilter[] | undefined;
|
|
@@ -305,12 +305,12 @@ export type AwsSecurityFindingFilters = {
|
|
|
305
305
|
/**
|
|
306
306
|
* A timestamp that identifies when the process was terminated.
|
|
307
307
|
*
|
|
308
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
308
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
309
309
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-processterminatedat}
|
|
310
310
|
*/
|
|
311
311
|
ProcessTerminatedAt?: DateFilter[] | undefined;
|
|
312
312
|
/**
|
|
313
|
-
* The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub.
|
|
313
|
+
* The ARN generated by Security Hub CSPM that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub CSPM.
|
|
314
314
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-productarn}
|
|
315
315
|
*/
|
|
316
316
|
ProductArn?: StringFilter[] | undefined;
|
|
@@ -452,7 +452,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
452
452
|
/**
|
|
453
453
|
* A timestamp that identifies when the container was started.
|
|
454
454
|
*
|
|
455
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
455
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
456
456
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-resourcecontainerlaunchedat}
|
|
457
457
|
*/
|
|
458
458
|
ResourceContainerLaunchedAt?: DateFilter[] | undefined;
|
|
@@ -536,7 +536,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
536
536
|
/**
|
|
537
537
|
* A timestamp that identifies the last observation of a threat intelligence indicator.
|
|
538
538
|
*
|
|
539
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
539
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
540
540
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-threatintelindicatorlastobservedat}
|
|
541
541
|
*/
|
|
542
542
|
ThreatIntelIndicatorLastObservedAt?: DateFilter[] | undefined;
|
|
@@ -573,7 +573,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
573
573
|
/**
|
|
574
574
|
* A timestamp that indicates when the security findings provider last updated the finding record.
|
|
575
575
|
*
|
|
576
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
576
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
577
577
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-updatedat}
|
|
578
578
|
*/
|
|
579
579
|
UpdatedAt?: DateFilter[] | undefined;
|
|
@@ -588,12 +588,12 @@ export type AwsSecurityFindingFilters = {
|
|
|
588
588
|
*/
|
|
589
589
|
VerificationState?: StringFilter[] | undefined;
|
|
590
590
|
/**
|
|
591
|
-
* Indicates whether a software vulnerability in your environment has a known exploit. You can filter findings by this field only if you use Security Hub and Amazon Inspector.
|
|
591
|
+
* Indicates whether a software vulnerability in your environment has a known exploit. You can filter findings by this field only if you use Security Hub CSPM and Amazon Inspector.
|
|
592
592
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-vulnerabilitiesexploitavailable}
|
|
593
593
|
*/
|
|
594
594
|
VulnerabilitiesExploitAvailable?: StringFilter[] | undefined;
|
|
595
595
|
/**
|
|
596
|
-
* Indicates whether a vulnerability is fixed in a newer version of the affected software packages. You can filter findings by this field only if you use Security Hub and Amazon Inspector.
|
|
596
|
+
* Indicates whether a vulnerability is fixed in a newer version of the affected software packages. You can filter findings by this field only if you use Security Hub CSPM and Amazon Inspector.
|
|
597
597
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-vulnerabilitiesfixavailable}
|
|
598
598
|
*/
|
|
599
599
|
VulnerabilitiesFixAvailable?: StringFilter[] | undefined;
|
|
@@ -609,7 +609,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
609
609
|
*
|
|
610
610
|
* - `NEW` - The initial state of a finding, before it is reviewed.
|
|
611
611
|
*
|
|
612
|
-
* Security Hub also resets the workflow status from `NOTIFIED` or `RESOLVED` to `NEW` in the following cases:
|
|
612
|
+
* Security Hub CSPM also resets the workflow status from `NOTIFIED` or `RESOLVED` to `NEW` in the following cases:
|
|
613
613
|
*
|
|
614
614
|
* - `RecordState` changes from `ARCHIVED` to `ACTIVE` .
|
|
615
615
|
* - `Compliance.Status` changes from `PASSED` to either `WARNING` , `FAILED` , or `NOT_AVAILABLE` .
|
|
@@ -631,7 +631,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
631
631
|
*
|
|
632
632
|
* In those cases, the workflow status is automatically reset to `NEW` .
|
|
633
633
|
*
|
|
634
|
-
* For findings from controls, if `Compliance.Status` is `PASSED` , then Security Hub automatically sets the workflow status to `RESOLVED` .
|
|
634
|
+
* For findings from controls, if `Compliance.Status` is `PASSED` , then Security Hub CSPM automatically sets the workflow status to `RESOLVED` .
|
|
635
635
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-workflowstatus}
|
|
636
636
|
*/
|
|
637
637
|
WorkflowStatus?: StringFilter[] | undefined;
|
|
@@ -660,14 +660,14 @@ export type DateFilter = {
|
|
|
660
660
|
/**
|
|
661
661
|
* A timestamp that provides the end date for the date filter.
|
|
662
662
|
*
|
|
663
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
663
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
664
664
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-datefilter.html#cfn-securityhub-insight-datefilter-end}
|
|
665
665
|
*/
|
|
666
666
|
End?: string | undefined;
|
|
667
667
|
/**
|
|
668
668
|
* A timestamp that provides the start date for the date filter.
|
|
669
669
|
*
|
|
670
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
670
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
671
671
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-datefilter.html#cfn-securityhub-insight-datefilter-start}
|
|
672
672
|
*/
|
|
673
673
|
Start?: string | undefined;
|
|
@@ -711,12 +711,12 @@ export type KeywordFilter = {
|
|
|
711
711
|
Value: string;
|
|
712
712
|
};
|
|
713
713
|
/**
|
|
714
|
-
* A map filter for filtering Security Hub findings. Each map filter provides the field to check for, the value to check for, and the comparison operator.
|
|
714
|
+
* A map filter for filtering AWS Security Hub CSPM findings. Each map filter provides the field to check for, the value to check for, and the comparison operator.
|
|
715
715
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-mapfilter.html}
|
|
716
716
|
*/
|
|
717
717
|
export type MapFilter = {
|
|
718
718
|
/**
|
|
719
|
-
* The condition to apply to the key value when filtering Security Hub findings with a map filter.
|
|
719
|
+
* The condition to apply to the key value when filtering Security Hub CSPM findings with a map filter.
|
|
720
720
|
*
|
|
721
721
|
* To search for values that have the filter value, use one of the following comparison operators:
|
|
722
722
|
*
|
|
@@ -736,7 +736,7 @@ export type MapFilter = {
|
|
|
736
736
|
*
|
|
737
737
|
* You can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can’t have both an `EQUALS` filter and a `NOT_EQUALS` filter on the same field. Combining filters in this way returns an error.
|
|
738
738
|
*
|
|
739
|
-
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
|
|
739
|
+
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
|
|
740
740
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-mapfilter.html#cfn-securityhub-insight-mapfilter-comparison}
|
|
741
741
|
*/
|
|
742
742
|
Comparison: "EQUALS" | "NOT_EQUALS";
|
|
@@ -773,12 +773,12 @@ export type NumberFilter = {
|
|
|
773
773
|
Lte?: number | undefined;
|
|
774
774
|
};
|
|
775
775
|
/**
|
|
776
|
-
* A string filter for filtering Security Hub findings.
|
|
776
|
+
* A string filter for filtering AWS Security Hub CSPM findings.
|
|
777
777
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-stringfilter.html}
|
|
778
778
|
*/
|
|
779
779
|
export type StringFilter = {
|
|
780
780
|
/**
|
|
781
|
-
* The condition to apply to a string value when filtering Security Hub findings.
|
|
781
|
+
* The condition to apply to a string value when filtering Security Hub CSPM findings.
|
|
782
782
|
*
|
|
783
783
|
* To search for values that have the filter value, use one of the following comparison operators:
|
|
784
784
|
*
|
|
@@ -798,21 +798,21 @@ export type StringFilter = {
|
|
|
798
798
|
*
|
|
799
799
|
* You can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can't provide both an `EQUALS` filter and a `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filter on the same field. Combining filters in this way returns an error. `CONTAINS` filters can only be used with other `CONTAINS` filters. `NOT_CONTAINS` filters can only be used with other `NOT_CONTAINS` filters.
|
|
800
800
|
*
|
|
801
|
-
* You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
|
|
801
|
+
* You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub CSPM first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
|
|
802
802
|
*
|
|
803
|
-
* For example, for the following filters, Security Hub first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
|
|
803
|
+
* For example, for the following filters, Security Hub CSPM first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
|
|
804
804
|
*
|
|
805
805
|
* - `ResourceType PREFIX AwsIam`
|
|
806
806
|
* - `ResourceType PREFIX AwsEc2`
|
|
807
807
|
* - `ResourceType NOT_EQUALS AwsIamPolicy`
|
|
808
808
|
* - `ResourceType NOT_EQUALS AwsEc2NetworkInterface`
|
|
809
809
|
*
|
|
810
|
-
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
|
|
810
|
+
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
|
|
811
811
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-stringfilter.html#cfn-securityhub-insight-stringfilter-comparison}
|
|
812
812
|
*/
|
|
813
813
|
Comparison: StringFilterComparison;
|
|
814
814
|
/**
|
|
815
|
-
* The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub` . If you provide `security hub` as the filter value, there's no match.
|
|
815
|
+
* The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub CSPM` . If you provide `security hub` as the filter value, there's no match.
|
|
816
816
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-stringfilter.html#cfn-securityhub-insight-stringfilter-value}
|
|
817
817
|
*/
|
|
818
818
|
Value: string;
|
|
@@ -1,29 +1,29 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::OrganizationConfiguration` resource specifies the way that your AWS organization is configured in Security Hub . Specifically, you can use this resource to specify the configuration type for your organization and whether to automatically Security Hub and security standards in new member accounts. For more information, see [Managing administrator and member accounts](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts.html) in the *Security Hub User Guide* .
|
|
3
|
+
* The `AWS::SecurityHub::OrganizationConfiguration` resource specifies the way that your AWS organization is configured in AWS Security Hub CSPM . Specifically, you can use this resource to specify the configuration type for your organization and whether to automatically Security Hub CSPM and security standards in new member accounts. For more information, see [Managing administrator and member accounts](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts.html) in the *AWS Security Hub CSPM User Guide* .
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-organizationconfiguration.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SecurityHubOrganizationConfiguration = ResourceDefinitionWithAttributes<"AWS::SecurityHub::OrganizationConfiguration", SecurityHubOrganizationConfigurationProps, SecurityHubOrganizationConfigurationAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* The `AWS::SecurityHub::OrganizationConfiguration` resource specifies the way that your AWS organization is configured in Security Hub . Specifically, you can use this resource to specify the configuration type for your organization and whether to automatically Security Hub and security standards in new member accounts. For more information, see [Managing administrator and member accounts](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts.html) in the *Security Hub User Guide* .
|
|
8
|
+
* The `AWS::SecurityHub::OrganizationConfiguration` resource specifies the way that your AWS organization is configured in AWS Security Hub CSPM . Specifically, you can use this resource to specify the configuration type for your organization and whether to automatically Security Hub CSPM and security standards in new member accounts. For more information, see [Managing administrator and member accounts](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts.html) in the *AWS Security Hub CSPM User Guide* .
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-organizationconfiguration.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SecurityHubOrganizationConfigurationProps = {
|
|
12
12
|
/**
|
|
13
|
-
* Whether to automatically enable Security Hub in new member accounts when they join the organization.
|
|
13
|
+
* Whether to automatically enable Security Hub CSPM in new member accounts when they join the organization.
|
|
14
14
|
*
|
|
15
|
-
* If set to `true` , then Security Hub is automatically enabled in new accounts. If set to `false` , then Security Hub isn't enabled in new accounts automatically. The default value is `false` .
|
|
15
|
+
* If set to `true` , then Security Hub CSPM is automatically enabled in new accounts. If set to `false` , then Security Hub CSPM isn't enabled in new accounts automatically. The default value is `false` .
|
|
16
16
|
*
|
|
17
|
-
* If the `ConfigurationType` of your organization is set to `CENTRAL` , then this field is set to `false` and can't be changed in the home Region and linked Regions. However, in that case, the delegated administrator can create a configuration policy in which Security Hub is enabled and associate the policy with new organization accounts.
|
|
17
|
+
* If the `ConfigurationType` of your organization is set to `CENTRAL` , then this field is set to `false` and can't be changed in the home Region and linked Regions. However, in that case, the delegated administrator can create a configuration policy in which Security Hub CSPM is enabled and associate the policy with new organization accounts.
|
|
18
18
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-organizationconfiguration.html#cfn-securityhub-organizationconfiguration-autoenable}
|
|
19
19
|
*/
|
|
20
20
|
AutoEnable: boolean;
|
|
21
21
|
/**
|
|
22
|
-
* Whether to automatically enable Security Hub [default standards](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-enable-disable.html) in new member accounts when they join the organization.
|
|
22
|
+
* Whether to automatically enable Security Hub CSPM [default standards](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-enable-disable.html) in new member accounts when they join the organization.
|
|
23
23
|
*
|
|
24
24
|
* The default value of this parameter is equal to `DEFAULT` .
|
|
25
25
|
*
|
|
26
|
-
* If equal to `DEFAULT` , then Security Hub default standards are automatically enabled for new member accounts. If equal to `NONE` , then default standards are not automatically enabled for new member accounts.
|
|
26
|
+
* If equal to `DEFAULT` , then Security Hub CSPM default standards are automatically enabled for new member accounts. If equal to `NONE` , then default standards are not automatically enabled for new member accounts.
|
|
27
27
|
*
|
|
28
28
|
* If the `ConfigurationType` of your organization is set to `CENTRAL` , then this field is set to `NONE` and can't be changed in the home Region and linked Regions. However, in that case, the delegated administrator can create a configuration policy in which specific security standards are enabled and associate the policy with new organization accounts.
|
|
29
29
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-organizationconfiguration.html#cfn-securityhub-organizationconfiguration-autoenablestandards}
|
|
@@ -32,9 +32,9 @@ export type SecurityHubOrganizationConfigurationProps = {
|
|
|
32
32
|
/**
|
|
33
33
|
* Indicates whether the organization uses local or central configuration.
|
|
34
34
|
*
|
|
35
|
-
* If you use local configuration, the Security Hub delegated administrator can set `AutoEnable` to `true` and `AutoEnableStandards` to `DEFAULT` . This automatically enables Security Hub and default security standards in new organization accounts. These new account settings must be set separately in each AWS Region , and settings may be different in each Region.
|
|
35
|
+
* If you use local configuration, the Security Hub CSPM delegated administrator can set `AutoEnable` to `true` and `AutoEnableStandards` to `DEFAULT` . This automatically enables Security Hub CSPM and default security standards in new organization accounts. These new account settings must be set separately in each AWS Region , and settings may be different in each Region.
|
|
36
36
|
*
|
|
37
|
-
* If you use central configuration, the delegated administrator can create configuration policies. Configuration policies can be used to configure Security Hub, security standards, and security controls in multiple accounts and Regions. If you want new organization accounts to use a specific configuration, you can create a configuration policy and associate it with the root or specific organizational units (OUs). New accounts will inherit the policy from the root or their assigned OU.
|
|
37
|
+
* If you use central configuration, the delegated administrator can create configuration policies. Configuration policies can be used to configure Security Hub CSPM, security standards, and security controls in multiple accounts and Regions. If you want new organization accounts to use a specific configuration, you can create a configuration policy and associate it with the root or specific organizational units (OUs). New accounts will inherit the policy from the root or their assigned OU.
|
|
38
38
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-organizationconfiguration.html#cfn-securityhub-organizationconfiguration-configurationtype}
|
|
39
39
|
*/
|
|
40
40
|
ConfigurationType?: "CENTRAL" | "LOCAL" | undefined;
|
|
@@ -44,7 +44,7 @@ export type SecurityHubOrganizationConfigurationProps = {
|
|
|
44
44
|
*/
|
|
45
45
|
export type SecurityHubOrganizationConfigurationAttribs = {
|
|
46
46
|
/**
|
|
47
|
-
* Whether the maximum number of allowed member accounts are already associated with the Security Hub administrator account.
|
|
47
|
+
* Whether the maximum number of allowed member accounts are already associated with the Security Hub CSPM administrator account.
|
|
48
48
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-organizationconfiguration.html#cfn-securityhub-organizationconfiguration-memberaccountlimitreached}
|
|
49
49
|
*/
|
|
50
50
|
MemberAccountLimitReached: boolean;
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::PolicyAssociation` resource specifies associations for a configuration policy or a self-managed configuration. You can associate a Security Hub configuration policy or self-managed configuration with the organization root, organizational units (OUs), or AWS accounts . After a successful association, the configuration policy takes effect in the specified targets. For more information, see [Creating and associating Security Hub configuration policies](https://docs.aws.amazon.com/securityhub/latest/userguide/create-associate-policy.html) in the *Security Hub User Guide* .
|
|
3
|
+
* The `AWS::SecurityHub::PolicyAssociation` resource specifies associations for a configuration policy or a self-managed configuration. You can associate a AWS Security Hub CSPM configuration policy or self-managed configuration with the organization root, organizational units (OUs), or AWS accounts . After a successful association, the configuration policy takes effect in the specified targets. For more information, see [Creating and associating Security Hub CSPM configuration policies](https://docs.aws.amazon.com/securityhub/latest/userguide/create-associate-policy.html) in the *AWS Security Hub CSPM User Guide* .
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-policyassociation.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SecurityHubPolicyAssociation = ResourceDefinitionWithAttributes<"AWS::SecurityHub::PolicyAssociation", SecurityHubPolicyAssociationProps, SecurityHubPolicyAssociationAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* The `AWS::SecurityHub::PolicyAssociation` resource specifies associations for a configuration policy or a self-managed configuration. You can associate a Security Hub configuration policy or self-managed configuration with the organization root, organizational units (OUs), or AWS accounts . After a successful association, the configuration policy takes effect in the specified targets. For more information, see [Creating and associating Security Hub configuration policies](https://docs.aws.amazon.com/securityhub/latest/userguide/create-associate-policy.html) in the *Security Hub User Guide* .
|
|
8
|
+
* The `AWS::SecurityHub::PolicyAssociation` resource specifies associations for a configuration policy or a self-managed configuration. You can associate a AWS Security Hub CSPM configuration policy or self-managed configuration with the organization root, organizational units (OUs), or AWS accounts . After a successful association, the configuration policy takes effect in the specified targets. For more information, see [Creating and associating Security Hub CSPM configuration policies](https://docs.aws.amazon.com/securityhub/latest/userguide/create-associate-policy.html) in the *AWS Security Hub CSPM User Guide* .
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-policyassociation.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SecurityHubPolicyAssociationProps = {
|
|
@@ -46,7 +46,7 @@ export type SecurityHubPolicyAssociationAttribs = {
|
|
|
46
46
|
*/
|
|
47
47
|
AssociationStatusMessage: string;
|
|
48
48
|
/**
|
|
49
|
-
* Indicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent.
|
|
49
|
+
* Indicates whether the association between the specified target and the configuration was directly applied by the AWS Security Hub CSPM delegated administrator or inherited from a parent.
|
|
50
50
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-policyassociation.html#cfn-securityhub-policyassociation-associationtype}
|
|
51
51
|
*/
|
|
52
52
|
AssociationType: "APPLIED" | "INHERITED";
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::ProductSubscription` resource creates a subscription to a third-party product that generates findings that you want to receive in Security Hub . For a list of integrations to third-party products, see [Available third-party partner product integrations](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-partner-providers.html) in the *Security Hub User Guide* .
|
|
3
|
+
* The `AWS::SecurityHub::ProductSubscription` resource creates a subscription to a third-party product that generates findings that you want to receive in AWS Security Hub CSPM . For a list of integrations to third-party products, see [Available third-party partner product integrations](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-partner-providers.html) in the *AWS Security Hub CSPM User Guide* .
|
|
4
4
|
*
|
|
5
5
|
* To change a product subscription, remove the current product subscription resource, and then create a new one.
|
|
6
6
|
*
|
|
@@ -9,7 +9,7 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
|
9
9
|
*/
|
|
10
10
|
export type SecurityHubProductSubscription = ResourceDefinitionWithAttributes<"AWS::SecurityHub::ProductSubscription", SecurityHubProductSubscriptionProps, SecurityHubProductSubscriptionAttribs>;
|
|
11
11
|
/**
|
|
12
|
-
* The `AWS::SecurityHub::ProductSubscription` resource creates a subscription to a third-party product that generates findings that you want to receive in Security Hub . For a list of integrations to third-party products, see [Available third-party partner product integrations](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-partner-providers.html) in the *Security Hub User Guide* .
|
|
12
|
+
* The `AWS::SecurityHub::ProductSubscription` resource creates a subscription to a third-party product that generates findings that you want to receive in AWS Security Hub CSPM . For a list of integrations to third-party products, see [Available third-party partner product integrations](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-partner-providers.html) in the *AWS Security Hub CSPM User Guide* .
|
|
13
13
|
*
|
|
14
14
|
* To change a product subscription, remove the current product subscription resource, and then create a new one.
|
|
15
15
|
*
|
|
Binary file
|
|
@@ -1,19 +1,19 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::Standard` resource specifies the enablement of a security standard. The standard is identified by the `StandardsArn` property. To view a list of Security Hub standards and their Amazon Resource Names (ARNs), use the [`DescribeStandards`](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation.
|
|
3
|
+
* The `AWS::SecurityHub::Standard` resource specifies the enablement of a security standard. The standard is identified by the `StandardsArn` property. To view a list of Security Hub CSPM standards and their Amazon Resource Names (ARNs), use the [`DescribeStandards`](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation.
|
|
4
4
|
*
|
|
5
5
|
* You must create a separate `AWS::SecurityHub::Standard` resource for each standard that you want to enable.
|
|
6
6
|
*
|
|
7
|
-
* For more information about Security Hub standards, see [Security Hub standards reference](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-reference.html) in the *Security Hub User Guide* .
|
|
7
|
+
* For more information about Security Hub CSPM standards, see [Security Hub CSPM standards reference](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-reference.html) in the *AWS Security Hub CSPM User Guide* .
|
|
8
8
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html}
|
|
9
9
|
*/
|
|
10
10
|
export type SecurityHubStandard = ResourceDefinitionWithAttributes<"AWS::SecurityHub::Standard", SecurityHubStandardProps, SecurityHubStandardAttribs>;
|
|
11
11
|
/**
|
|
12
|
-
* The `AWS::SecurityHub::Standard` resource specifies the enablement of a security standard. The standard is identified by the `StandardsArn` property. To view a list of Security Hub standards and their Amazon Resource Names (ARNs), use the [`DescribeStandards`](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation.
|
|
12
|
+
* The `AWS::SecurityHub::Standard` resource specifies the enablement of a security standard. The standard is identified by the `StandardsArn` property. To view a list of Security Hub CSPM standards and their Amazon Resource Names (ARNs), use the [`DescribeStandards`](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation.
|
|
13
13
|
*
|
|
14
14
|
* You must create a separate `AWS::SecurityHub::Standard` resource for each standard that you want to enable.
|
|
15
15
|
*
|
|
16
|
-
* For more information about Security Hub standards, see [Security Hub standards reference](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-reference.html) in the *Security Hub User Guide* .
|
|
16
|
+
* For more information about Security Hub CSPM standards, see [Security Hub CSPM standards reference](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-reference.html) in the *AWS Security Hub CSPM User Guide* .
|
|
17
17
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html}
|
|
18
18
|
*/
|
|
19
19
|
export type SecurityHubStandardProps = {
|
|
@@ -25,7 +25,7 @@ export type SecurityHubStandardProps = {
|
|
|
25
25
|
*/
|
|
26
26
|
DisabledStandardsControls?: StandardsControl[] | undefined;
|
|
27
27
|
/**
|
|
28
|
-
* The ARN of the standard that you want to enable. To view a list of available Security Hub standards and their ARNs, use the [`DescribeStandards`](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation.
|
|
28
|
+
* The ARN of the standard that you want to enable. To view a list of available Security Hub CSPM standards and their ARNs, use the [`DescribeStandards`](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation.
|
|
29
29
|
* @pattern arn:aws\S*:securityhub:\S
|
|
30
30
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html#cfn-securityhub-standard-standardsarn}
|
|
31
31
|
*/
|
|
@@ -43,7 +43,7 @@ export type SecurityHubStandardAttribs = {
|
|
|
43
43
|
StandardsSubscriptionArn: string;
|
|
44
44
|
};
|
|
45
45
|
/**
|
|
46
|
-
* Provides details about an individual security control. For a list of Security Hub controls, see [Security Hub controls reference](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-controls-reference.html) in the *Security Hub User Guide* .
|
|
46
|
+
* Provides details about an individual security control. For a list of Security Hub CSPM controls, see [Security Hub CSPM controls reference](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-controls-reference.html) in the *AWS Security Hub CSPM User Guide* .
|
|
47
47
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-standard-standardscontrol.html}
|
|
48
48
|
*/
|
|
49
49
|
export type StandardsControl = {
|
|
@@ -172,6 +172,12 @@ export type TransferConnectorAttribs = {
|
|
|
172
172
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-connector.html#cfn-transfer-connector-connectorid}
|
|
173
173
|
*/
|
|
174
174
|
ConnectorId: string;
|
|
175
|
+
/**
|
|
176
|
+
* Error message providing details when the connector is in ERRORED status. Contains information to help troubleshoot connector creation or operation failures.
|
|
177
|
+
* @maxLength 2048
|
|
178
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-connector.html#cfn-transfer-connector-errormessage}
|
|
179
|
+
*/
|
|
180
|
+
ErrorMessage: string;
|
|
175
181
|
/**
|
|
176
182
|
* The list of egress IP addresses of this connector. These IP addresses are assigned automatically when you create the connector.
|
|
177
183
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-transfer-connector.html#cfn-transfer-connector-servicemanagedegressipaddresses}
|