StandardsControlAssociationArgs

data class StandardsControlAssociationArgs(val associationStatus: Output<String>? = null, val securityControlId: Output<String>? = null, val standardsArn: Output<String>? = null, val updatedReason: Output<String>? = null) : ConvertibleToJava<StandardsControlAssociationArgs>

Example Usage

Basic usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.securityhub.Account("example", {});
const cisAwsFoundationsBenchmark = new aws.securityhub.StandardsSubscription("cis_aws_foundations_benchmark", {standardsArn: "arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0"}, {
dependsOn: [example],
});
const cisAwsFoundationsBenchmarkDisableIam1 = new aws.securityhub.StandardsControlAssociation("cis_aws_foundations_benchmark_disable_iam_1", {
standardsArn: cisAwsFoundationsBenchmark.standardsArn,
securityControlId: "IAM.1",
associationStatus: "DISABLED",
updatedReason: "Not needed",
});
import pulumi
import pulumi_aws as aws
example = aws.securityhub.Account("example")
cis_aws_foundations_benchmark = aws.securityhub.StandardsSubscription("cis_aws_foundations_benchmark", standards_arn="arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0",
opts = pulumi.ResourceOptions(depends_on=[example]))
cis_aws_foundations_benchmark_disable_iam1 = aws.securityhub.StandardsControlAssociation("cis_aws_foundations_benchmark_disable_iam_1",
standards_arn=cis_aws_foundations_benchmark.standards_arn,
security_control_id="IAM.1",
association_status="DISABLED",
updated_reason="Not needed")
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var example = new Aws.SecurityHub.Account("example");
var cisAwsFoundationsBenchmark = new Aws.SecurityHub.StandardsSubscription("cis_aws_foundations_benchmark", new()
{
StandardsArn = "arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0",
}, new CustomResourceOptions
{
DependsOn =
{
example,
},
});
var cisAwsFoundationsBenchmarkDisableIam1 = new Aws.SecurityHub.StandardsControlAssociation("cis_aws_foundations_benchmark_disable_iam_1", new()
{
StandardsArn = cisAwsFoundationsBenchmark.StandardsArn,
SecurityControlId = "IAM.1",
AssociationStatus = "DISABLED",
UpdatedReason = "Not needed",
});
});
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/securityhub"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
example, err := securityhub.NewAccount(ctx, "example", nil)
if err != nil {
return err
}
cisAwsFoundationsBenchmark, err := securityhub.NewStandardsSubscription(ctx, "cis_aws_foundations_benchmark", &securityhub.StandardsSubscriptionArgs{
StandardsArn: pulumi.String("arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0"),
}, pulumi.DependsOn([]pulumi.Resource{
example,
}))
if err != nil {
return err
}
_, err = securityhub.NewStandardsControlAssociation(ctx, "cis_aws_foundations_benchmark_disable_iam_1", &securityhub.StandardsControlAssociationArgs{
StandardsArn: cisAwsFoundationsBenchmark.StandardsArn,
SecurityControlId: pulumi.String("IAM.1"),
AssociationStatus: pulumi.String("DISABLED"),
UpdatedReason: pulumi.String("Not needed"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.securityhub.Account;
import com.pulumi.aws.securityhub.StandardsSubscription;
import com.pulumi.aws.securityhub.StandardsSubscriptionArgs;
import com.pulumi.aws.securityhub.StandardsControlAssociation;
import com.pulumi.aws.securityhub.StandardsControlAssociationArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new Account("example");
var cisAwsFoundationsBenchmark = new StandardsSubscription("cisAwsFoundationsBenchmark", StandardsSubscriptionArgs.builder()
.standardsArn("arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0")
.build(), CustomResourceOptions.builder()
.dependsOn(example)
.build());
var cisAwsFoundationsBenchmarkDisableIam1 = new StandardsControlAssociation("cisAwsFoundationsBenchmarkDisableIam1", StandardsControlAssociationArgs.builder()
.standardsArn(cisAwsFoundationsBenchmark.standardsArn())
.securityControlId("IAM.1")
.associationStatus("DISABLED")
.updatedReason("Not needed")
.build());
}
}
resources:
example:
type: aws:securityhub:Account
cisAwsFoundationsBenchmark:
type: aws:securityhub:StandardsSubscription
name: cis_aws_foundations_benchmark
properties:
standardsArn: arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0
options:
dependsOn:
- ${example}
cisAwsFoundationsBenchmarkDisableIam1:
type: aws:securityhub:StandardsControlAssociation
name: cis_aws_foundations_benchmark_disable_iam_1
properties:
standardsArn: ${cisAwsFoundationsBenchmark.standardsArn}
securityControlId: IAM.1
associationStatus: DISABLED
updatedReason: Not needed

Constructors

Link copied to clipboard
constructor(associationStatus: Output<String>? = null, securityControlId: Output<String>? = null, standardsArn: Output<String>? = null, updatedReason: Output<String>? = null)

Properties

Link copied to clipboard
val associationStatus: Output<String>? = null

The desired enablement status of the control in the standard. Valid values: ENABLED, DISABLED.

Link copied to clipboard
val securityControlId: Output<String>? = null

The unique identifier for the security control whose enablement status you want to update.

Link copied to clipboard
val standardsArn: Output<String>? = null

The Amazon Resource Name (ARN) of the standard in which you want to update the control's enablement status. The following arguments are optional:

Link copied to clipboard
val updatedReason: Output<String>? = null

The reason for updating the control's enablement status in the standard. Required when association_status is DISABLED.

Functions

Link copied to clipboard
open override fun toJava(): StandardsControlAssociationArgs