pulumi-aws-kotlin/com.pulumi.aws.securityhub.kotlin/OrganizationConfigurationArgs

OrganizationConfigurationArgs

data class OrganizationConfigurationArgs(val autoEnable: Output<Boolean>? = null, val autoEnableStandards: Output<String>? = null) : ConvertibleToJava<OrganizationConfigurationArgs>

Manages the Security Hub Organization Configuration.

NOTE: This resource requires an aws.securityhub.OrganizationAdminAccount to be configured (not necessarily with TODO). More information about managing Security Hub in an organization can be found in the Managing administrator and member accounts documentation NOTE: This is an advanced TODO resource. TODO will automatically assume management of the Security Hub Organization Configuration without import and perform no actions on removal from the TODO configuration.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.organizations.Organization;
import com.pulumi.aws.organizations.OrganizationArgs;
import com.pulumi.aws.securityhub.OrganizationAdminAccount;
import com.pulumi.aws.securityhub.OrganizationAdminAccountArgs;
import com.pulumi.aws.securityhub.OrganizationConfiguration;
import com.pulumi.aws.securityhub.OrganizationConfigurationArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var exampleOrganization = new Organization("exampleOrganization", OrganizationArgs.builder()
            .awsServiceAccessPrincipals("securityhub.amazonaws.com")
            .featureSet("ALL")
            .build());
        var exampleOrganizationAdminAccount = new OrganizationAdminAccount("exampleOrganizationAdminAccount", OrganizationAdminAccountArgs.builder()
            .adminAccountId("123456789012")
            .build(), CustomResourceOptions.builder()
                .dependsOn(exampleOrganization)
                .build());
        var exampleOrganizationConfiguration = new OrganizationConfiguration("exampleOrganizationConfiguration", OrganizationConfigurationArgs.builder()
            .autoEnable(true)
            .build());
    }
}
Content copied to clipboard

Import

In TODO v1.5.0 and later, use an import block to import an existing Security Hub enabled account using the AWS account ID. For exampleterraform import { to = aws_securityhub_organization_configuration.example id = "123456789012" } Using TODO import, import an existing Security Hub enabled account using the AWS account ID. For exampleconsole % TODO import aws_securityhub_organization_configuration.example 123456789012

Constructors

Link copied to clipboard
fun OrganizationConfigurationArgs(autoEnable: Output<Boolean>? = null, autoEnableStandards: Output<String>? = null)

Functions

Link copied to clipboard
open override fun toJava(): OrganizationConfigurationArgs

Properties

Link copied to clipboard
val autoEnable: Output<Boolean>? = null

Whether to automatically enable Security Hub for new accounts in the organization.

Link copied to clipboard
val autoEnableStandards: Output<String>? = null

Whether to automatically enable Security Hub default standards for new member accounts in the organization. By default, this parameter is equal to DEFAULT, and new member accounts are automatically enabled with default Security Hub standards. To opt out of enabling default standards for new member accounts, set this parameter equal to NONE.