aws_securityhub_hub
account_id
Type: STRING
auto_enable_controls
Type: BOOLEAN
Provider name: AutoEnableControls
Description: Whether to automatically enable new controls when they are added to standards that are enabled. If set to true
, then new controls for enabled standards are enabled automatically. If set to false
, then new controls are not enabled.
control_finding_generator
Type: STRING
Provider name: ControlFindingGenerator
Description: Specifies whether the calling account has consolidated control findings turned on. If the value for this field is set to SECURITY_CONTROL
, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards. If the value for this field is set to STANDARD_CONTROL
, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards. The value for this field in a member account matches the value in the administrator account. For accounts that aren’t part of an organization, the default value of this field is SECURITY_CONTROL
if you enabled Security Hub on or after February 23, 2023.
hub_arn
Type: STRING
Provider name: HubArn
Description: The ARN of the Hub resource that was retrieved.
subscribed_at
Type: STRING
Provider name: SubscribedAt
Description: The date and time when Security Hub was enabled in the account.
Type: UNORDERED_LIST_STRING