Standards Subscription
    Subscribes to a Security Hub standard.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.securityhub.Account("example", {});
const current = aws.getRegion({});
const cis = new aws.securityhub.StandardsSubscription("cis", {standardsArn: "arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0"}, {
    dependsOn: [example],
});
const pci321 = new aws.securityhub.StandardsSubscription("pci_321", {standardsArn: current.then(current => `arn:aws:securityhub:${current.name}::standards/pci-dss/v/3.2.1`)}, {
    dependsOn: [example],
});import pulumi
import pulumi_aws as aws
example = aws.securityhub.Account("example")
current = aws.get_region()
cis = aws.securityhub.StandardsSubscription("cis", standards_arn="arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0",
opts=pulumi.ResourceOptions(depends_on=[example]))
pci321 = aws.securityhub.StandardsSubscription("pci_321", standards_arn=f"arn:aws:securityhub:{current.name}::standards/pci-dss/v/3.2.1",
opts=pulumi.ResourceOptions(depends_on=[example]))using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
    var example = new Aws.SecurityHub.Account("example");
    var current = Aws.GetRegion.Invoke();
    var cis = new Aws.SecurityHub.StandardsSubscription("cis", new()
    {
        StandardsArn = "arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0",
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            example,
        },
    });
    var pci321 = new Aws.SecurityHub.StandardsSubscription("pci_321", new()
    {
        StandardsArn = $"arn:aws:securityhub:{current.Apply(getRegionResult => getRegionResult.Name)}::standards/pci-dss/v/3.2.1",
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            example,
        },
    });
});package main
import (
	"fmt"
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws"
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/securityhub"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := securityhub.NewAccount(ctx, "example", nil)
		if err != nil {
			return err
		}
		current, err := aws.GetRegion(ctx, nil, nil)
		if err != nil {
			return err
		}
		_, err = securityhub.NewStandardsSubscription(ctx, "cis", &securityhub.StandardsSubscriptionArgs{
			StandardsArn: pulumi.String("arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0"),
		}, pulumi.DependsOn([]pulumi.Resource{
			example,
		}))
		if err != nil {
			return err
		}
		_, err = securityhub.NewStandardsSubscription(ctx, "pci_321", &securityhub.StandardsSubscriptionArgs{
			StandardsArn: pulumi.String(fmt.Sprintf("arn:aws:securityhub:%v::standards/pci-dss/v/3.2.1", current.Name)),
		}, pulumi.DependsOn([]pulumi.Resource{
			example,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.securityhub.Account;
import com.pulumi.aws.AwsFunctions;
import com.pulumi.aws.inputs.GetRegionArgs;
import com.pulumi.aws.securityhub.StandardsSubscription;
import com.pulumi.aws.securityhub.StandardsSubscriptionArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var example = new Account("example");
        final var current = AwsFunctions.getRegion();
        var cis = new StandardsSubscription("cis", StandardsSubscriptionArgs.builder()
            .standardsArn("arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0")
            .build(), CustomResourceOptions.builder()
                .dependsOn(example)
                .build());
        var pci321 = new StandardsSubscription("pci321", StandardsSubscriptionArgs.builder()
            .standardsArn(String.format("arn:aws:securityhub:%s::standards/pci-dss/v/3.2.1", current.applyValue(getRegionResult -> getRegionResult.name())))
            .build(), CustomResourceOptions.builder()
                .dependsOn(example)
                .build());
    }
}resources:
  example:
    type: aws:securityhub:Account
  cis:
    type: aws:securityhub:StandardsSubscription
    properties:
      standardsArn: arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0
    options:
      dependson:
        - ${example}
  pci321:
    type: aws:securityhub:StandardsSubscription
    name: pci_321
    properties:
      standardsArn: arn:aws:securityhub:${current.name}::standards/pci-dss/v/3.2.1
    options:
      dependson:
        - ${example}
variables:
  current:
    fn::invoke:
      Function: aws:getRegion
      Arguments: {}Import
Using pulumi import, import Security Hub standards subscriptions using the standards subscription ARN. For example:
$ pulumi import aws:securityhub/standardsSubscription:StandardsSubscription cis arn:aws:securityhub:eu-west-1:123456789012:subscription/cis-aws-foundations-benchmark/v/1.2.0$ pulumi import aws:securityhub/standardsSubscription:StandardsSubscription pci_321 arn:aws:securityhub:eu-west-1:123456789012:subscription/pci-dss/v/3.2.1$ pulumi import aws:securityhub/standardsSubscription:StandardsSubscription nist_800_53_rev_5 arn:aws:securityhub:eu-west-1:123456789012:subscription/nist-800-53/v/5.0.0Properties
The ARN of a standard - see below. Currently available standards (remember to replace ${var.region} as appropriate): | Name                                     | ARN                                                                                             | |------------------------------------------|-------------------------------------------------------------------------------------------------| | AWS Foundational Security Best Practices | arn:aws:securityhub:${var.region}::standards/aws-foundational-security-best-practices/v/1.0.0 | | CIS AWS Foundations Benchmark v1.2.0     | arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0                           | | CIS AWS Foundations Benchmark v1.4.0     | arn:aws:securityhub:${var.region}::standards/cis-aws-foundations-benchmark/v/1.4.0            | | NIST SP 800-53 Rev. 5                    | arn:aws:securityhub:${var.region}::standards/nist-800-53/v/5.0.0                              | | PCI DSS                                  | arn:aws:securityhub:${var.region}::standards/pci-dss/v/3.2.1                                  |