AWS SecurityHub

2020/07/28 - AWS SecurityHub - 1 new 1 updated api methods

Changes  Added UpdateSecurityHubConfiguration API. Security Hub now allows customers to choose whether to automatically enable new controls that are added to an existing standard that the customer enabled. For example, if you enabled Foundational Security Best Practices for an account, you can automatically enable new controls as we add them to that standard. By default, new controls are enabled.

UpdateSecurityHubConfiguration (new) Link ¶

Updates configuration options for Security Hub.

See also: AWS API Documentation

Request Syntax

client.update_security_hub_configuration(
    AutoEnableControls=True|False
)
type AutoEnableControls

boolean

param AutoEnableControls

Whether to automatically enable new controls when they are added to standards that are enabled.

By default, this is set to true , and new controls are enabled automatically. To not automatically enable new controls, set this to false .

rtype

dict

returns

Response Syntax

{}

Response Structure

  • (dict) --

DescribeHub (updated) Link ¶
Changes (response)
{'AutoEnableControls': 'boolean'}

Returns details about the Hub resource in your account, including the HubArn and the time when you enabled Security Hub.

See also: AWS API Documentation

Request Syntax

client.describe_hub(
    HubArn='string'
)
type HubArn

string

param HubArn

The ARN of the Hub resource to retrieve.

rtype

dict

returns

Response Syntax

{
    'HubArn': 'string',
    'SubscribedAt': 'string',
    'AutoEnableControls': True|False
}

Response Structure

  • (dict) --

    • HubArn (string) --

      The ARN of the Hub resource that was retrieved.

    • SubscribedAt (string) --

      The date and time when Security Hub was enabled in the account.

    • AutoEnableControls (boolean) --

      Whether to automatically enable new controls when they are added to standards that are enabled.

      If set to true , then new controls for enabled standards are enabled automatically. If set to false , then new controls are not enabled.