AWS::SecurityHub::PolicyAssociationCfnPolicyAssociation
The `AWS::SecurityHub::PolicyAssociation` resource specifies associations for a configuration policy or a self-managed configuration. You can associate a AWS Security Hub CSPM configuration policy or self-managed configuration with the organization root, organizational units (OUs), or AWS accounts . After a successful association, the configuration policy takes effect in the specified targets. For more information, see [Creating and associating Security Hub CSPM configuration policies](https://docs.aws.amazon.com/securityhub/latest/userguide/create-associate-policy.html) in the *AWS Security Hub CSPM User Guide* .
Import
import { CfnPolicyAssociation } from 'aws-cdk-lib/aws-securityhub';Or use the module namespace:
import * as securityhub from 'aws-cdk-lib/aws-securityhub';
// securityhub.CfnPolicyAssociationProperties
Configuration passed to the constructor as CfnPolicyAssociationProps.
configurationPolicyIdRequiredstringThe universally unique identifier (UUID) of the configuration policy. A self-managed configuration has no UUID. The identifier of a self-managed configuration is `SELF_MANAGED_SECURITY_HUB` .
targetIdRequiredstringThe identifier of the target account, organizational unit, or the root.
targetTypeRequiredstringSpecifies whether the target is an AWS account , organizational unit, or the root.
CloudFormation Resource
This L1 construct maps directly to the following CloudFormation resource type.
Learn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterQuick Facts
aws-securityhubAWS::SecurityHub::PolicyAssociation