Class: AWSCDK::SecurityHub::CfnConfigurationPolicy::SecurityControlsConfigurationProperty

Inherits:
Jsii::Struct
  • Object
show all
Defined in:
security_hub/cfn_configuration_policy.rb

Overview

An object that defines which security controls are enabled in an AWS Security Hub CSPM configuration policy.

The enablement status of a control is aligned across all of the enabled standards in an account.

This property is required only if ServiceEnabled is set to true in your configuration policy.

See Also:

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(disabled_security_control_identifiers: nil, enabled_security_control_identifiers: nil, security_control_custom_parameters: nil) ⇒ SecurityControlsConfigurationProperty

Returns a new instance of SecurityControlsConfigurationProperty.

Parameters:

  • disabled_security_control_identifiers (Array<String>, nil) (defaults to: nil) —

    A list of security controls that are disabled in the configuration policy.

  • enabled_security_control_identifiers (Array<String>, nil) (defaults to: nil) —

    A list of security controls that are enabled in the configuration policy.

  • security_control_custom_parameters (AWSCDK::IResolvable, Array<AWSCDK::IResolvable, AWSCDK::SecurityHub::CfnConfigurationPolicy::SecurityControlCustomParameterProperty>, nil) (defaults to: nil) —

    A list of security controls and control parameter values that are included in a configuration policy.



826
827
828
829
830
831
832
833
 
# File 'security_hub/cfn_configuration_policy.rb', line 826

def initialize(disabled_security_control_identifiers: nil, enabled_security_control_identifiers: nil, security_control_custom_parameters: nil)
  @disabled_security_control_identifiers = disabled_security_control_identifiers
  Jsii::Type.check_type(@disabled_security_control_identifiers, JSON.parse(Base64.strict_decode64("eyJjb2xsZWN0aW9uIjp7ImVsZW1lbnR0eXBlIjp7InByaW1pdGl2ZSI6InN0cmluZyJ9LCJraW5kIjoiYXJyYXkifX0=")), "disabledSecurityControlIdentifiers") unless @disabled_security_control_identifiers.nil?
  @enabled_security_control_identifiers = enabled_security_control_identifiers
  Jsii::Type.check_type(@enabled_security_control_identifiers, JSON.parse(Base64.strict_decode64("eyJjb2xsZWN0aW9uIjp7ImVsZW1lbnR0eXBlIjp7InByaW1pdGl2ZSI6InN0cmluZyJ9LCJraW5kIjoiYXJyYXkifX0=")), "enabledSecurityControlIdentifiers") unless @enabled_security_control_identifiers.nil?
  @security_control_custom_parameters = security_control_custom_parameters
  Jsii::Type.check_type(@security_control_custom_parameters, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImNvbGxlY3Rpb24iOnsiZWxlbWVudHR5cGUiOnsidW5pb24iOnsidHlwZXMiOlt7ImZxbiI6ImF3cy1jZGstbGliLklSZXNvbHZhYmxlIn0seyJmcW4iOiJhd3MtY2RrLWxpYi5hd3Nfc2VjdXJpdHlodWIuQ2ZuQ29uZmlndXJhdGlvblBvbGljeS5TZWN1cml0eUNvbnRyb2xDdXN0b21QYXJhbWV0ZXJQcm9wZXJ0eSJ9XX19LCJraW5kIjoiYXJyYXkifX1dfX0=")), "securityControlCustomParameters") unless @security_control_custom_parameters.nil?
end

Instance Attribute Details

#disabled_security_control_identifiers ⇒ Array<String>? (readonly)

A list of security controls that are disabled in the configuration policy.

Provide only one of EnabledSecurityControlIdentifiers or DisabledSecurityControlIdentifiers .

If you provide DisabledSecurityControlIdentifiers , Security Hub CSPM enables all other controls not in the list, and enables AutoEnableControls .

Returns:

  • (Array<String>, nil)

See Also:



843
844
845
 
# File 'security_hub/cfn_configuration_policy.rb', line 843

def disabled_security_control_identifiers
  @disabled_security_control_identifiers
end

#enabled_security_control_identifiers ⇒ Array<String>? (readonly)

A list of security controls that are enabled in the configuration policy.

Provide only one of EnabledSecurityControlIdentifiers or DisabledSecurityControlIdentifiers .

If you provide EnabledSecurityControlIdentifiers , Security Hub CSPM disables all other controls not in the list, and disables AutoEnableControls .

Returns:

  • (Array<String>, nil)

See Also:



852
853
854
 
# File 'security_hub/cfn_configuration_policy.rb', line 852

def enabled_security_control_identifiers
  @enabled_security_control_identifiers
end

#security_control_custom_parameters ⇒ AWSCDK::IResolvable, ... (readonly)

A list of security controls and control parameter values that are included in a configuration policy.

Returns:

See Also:



857
858
859
 
# File 'security_hub/cfn_configuration_policy.rb', line 857

def security_control_custom_parameters
  @security_control_custom_parameters
end

Class Method Details

.jsii_properties ⇒ Object 



859
860
861
862
863
864
865
 
# File 'security_hub/cfn_configuration_policy.rb', line 859

def self.jsii_properties
  {
    :disabled_security_control_identifiers => "disabledSecurityControlIdentifiers",
    :enabled_security_control_identifiers => "enabledSecurityControlIdentifiers",
    :security_control_custom_parameters => "securityControlCustomParameters",
  }
end

Instance Method Details

#to_jsii ⇒ Object 



867
868
869
870
871
872
873
874
875
 
# File 'security_hub/cfn_configuration_policy.rb', line 867

def to_jsii
  result = {}
  result.merge!({
    "disabledSecurityControlIdentifiers" => @disabled_security_control_identifiers,
    "enabledSecurityControlIdentifiers" => @enabled_security_control_identifiers,
    "securityControlCustomParameters" => @security_control_custom_parameters,
  })
  result.compact
end