AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::SecurityHub::Standard

CfnStandard

The `AWS::SecurityHub::Standard` resource specifies the enablement of a security standard. The standard is identified by the `StandardsArn` property. To view a list of Security Hub CSPM standards and their Amazon Resource Names (ARNs), use the [`DescribeStandards`](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation. You must create a separate `AWS::SecurityHub::Standard` resource for each standard that you want to enable. For more information about Security Hub CSPM standards, see [Security Hub CSPM standards reference](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-reference.html) in the *AWS Security Hub CSPM User Guide* .

Import

import { CfnStandard } from 'aws-cdk-lib/aws-securityhub';

Or use the module namespace:

import * as securityhub from 'aws-cdk-lib/aws-securityhub';
// securityhub.CfnStandard

Properties

Configuration passed to the constructor as CfnStandardProps.

standardsArnRequired
string

The ARN of the standard that you want to enable. To view a list of available Security Hub CSPM standards and their ARNs, use the [`DescribeStandards`](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation.

disabledStandardsControlsOptional
IResolvable | IResolvable | StandardsControlProperty[]

Specifies which controls are to be disabled in a standard. *Maximum* : `100`

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter