Standards
Subscribes to a Security Hub standard.
Example Usage
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.securityhub.Account;
import com.pulumi.aws.AwsFunctions;
import com.pulumi.aws.inputs.GetRegionArgs;
import com.pulumi.aws.securityhub.StandardsSubscription;
import com.pulumi.aws.securityhub.StandardsSubscriptionArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new Account("example");
final var current = AwsFunctions.getRegion();
var cis = new StandardsSubscription("cis", StandardsSubscriptionArgs.builder()
.standardsArn("arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0")
.build(), CustomResourceOptions.builder()
.dependsOn(example)
.build());
var pci321 = new StandardsSubscription("pci321", StandardsSubscriptionArgs.builder()
.standardsArn(String.format("arn:aws:securityhub:%s::standards/pci-dss/v/3.2.1", current.applyValue(getRegionResult -> getRegionResult.name())))
.build(), CustomResourceOptions.builder()
.dependsOn(example)
.build());
}
}Import
Security Hub standards subscriptions can be imported using the standards subscription ARN, e.g.,
$ pulumi import aws:securityhub/standardsSubscription:StandardsSubscription cis arn:aws:securityhub:eu-west-1:123456789012:subscription/cis-aws-foundations-benchmark/v/1.2.0$ pulumi import aws:securityhub/standardsSubscription:StandardsSubscription pci_321 arn:aws:securityhub:eu-west-1:123456789012:subscription/pci-dss/v/3.2.1$ pulumi import aws:securityhub/standardsSubscription:StandardsSubscription nist_800_53_rev_5 arn:aws:securityhub:eu-west-1:123456789012:subscription/nist-800-53/v/5.0.0Properties
The ARN of a standard - see below. Currently available standards (remember to replace ${var.region} as appropriate): | Name | ARN | |------------------------------------------|-------------------------------------------------------------------------------------------------| | AWS Foundational Security Best Practices | arn:aws:securityhub:${var.region}::standards/aws-foundational-security-best-practices/v/1.0.0 | | CIS AWS Foundations Benchmark v1.2.0 | arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0 | | CIS AWS Foundations Benchmark v1.4.0 | arn:aws:securityhub:${var.region}::standards/cis-aws-foundations-benchmark/v/1.4.0 | | NIST SP 800-53 Rev. 5 | arn:aws:securityhub:${var.region}::standards/nist-800-53/v/5.0.0 | | PCI DSS | arn:aws:securityhub:${var.region}::standards/pci-dss/v/3.2.1 |