Skip to content

Latest commit

 

History

History

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

README.md

AWS Security Hub

Features

  • Enable Security Hub
  • Delegate management to administrator account
  • Subscribe to standards
  • Subscribe to 3rd party products (optional)

Requirements

Name Version
terraform >= 1.1.4
aws >= 4.1.0

Providers

Name Version
aws 4.2.0

Modules

No modules.

Resources

Name Type
aws_securityhub_account.self resource
aws_securityhub_organization_admin_account.self resource
aws_securityhub_organization_configuration.self resource
aws_securityhub_product_subscription.self resource
aws_region.current data source

Inputs

Name Description Type Default Required
account_type AWS account type (master, administrator, log, member) string n/a yes
enable Enable AWS GuardDuty and delegate administrator bool true no
enable_products Subscribe Security Hub to Products list(string) [] no
product_arns Security Hub product integrations map(any)
{
"3coresec/3coresec": ":product/3coresec/3coresec",
"alertlogic/althreatmanagement": "733251395267:product/alertlogic/althreatmanagement",
"amazon/detective": ":product/amazon/detective",
"aqua-security/kube-bench": ":product/aqua-security/kube-bench",
"aquasecurity/aquasecurity": ":product/aquasecurity/aquasecurity",
"armordefense/armoranywhere": "679703615338:product/armordefense/armoranywhere",
"atlassian/jira-service-management": ":product/atlassian/jira-service-management",
"atlassian/opsgenie": ":product/atlassian/opsgenie",
"attackiq/attackiq-platform": ":product/attackiq/attackiq-platform",
"aws/access-analyzer": ":product/aws/access-analyzer",
"aws/audit-manager": ":product/aws/audit-manager",
"aws/chatbot": ":product/aws/chatbot",
"aws/config": ":product/aws/config",
"aws/firewall-manager": ":product/aws/firewall-manager",
"aws/guardduty": ":product/aws/guardduty",
"aws/health": ":product/aws/health",
"aws/inspector": ":product/aws/inspector",
"aws/macie": ":product/aws/macie",
"aws/ssm-patch-manager": ":product/aws/ssm-patch-manager",
"aws/systems-manager-opscenter-and-explorer": ":product/aws/systems-manager-opscenter-and-explorer",
"aws/trusted-advisor": ":product/aws/trusted-advisor",
"barracuda/cloudsecurityguardian": "151784055945:product/barracuda/cloudsecurityguardian",
"bigid/bigid-enterprise": ":product/bigid/bigid-enterprise",
"blue-hexagon/blue-hexagon-for-aws": ":product/blue-hexagon/blue-hexagon-for-aws",
"capitis/c2vs": ":product/capitis/c2vs",
"caveonix/caveonix-cloud": ":product/caveonix/caveonix-cloud",
"checkpoint/cloudguard-iaas": "758245563457:product/checkpoint/cloudguard-iaas",
"checkpoint/dome9-arc": "634729597623:product/checkpoint/dome9-arc",
"cloud-custodian/cloud-custodian": ":product/cloud-custodian/cloud-custodian",
"cloud-storage-security/antivirus-for-amazon-s3": ":product/cloud-storage-security/antivirus-for-amazon-s3",
"cloudtamerio/cloudtamerio": ":product/cloudtamerio/cloudtamerio",
"crowdstrike/crowdstrike-falcon": "517716713836:product/crowdstrike/crowdstrike-falcon",
"cyberark/cyberark-pta": "749430749651:product/cyberark/cyberark-pta",
"data-theorem/api-cloud-web-secure": ":product/data-theorem/api-cloud-web-secure",
"disruptops-inc/disruptops": ":product/disruptops-inc/disruptops",
"fireeye/fireeye-helix": "264756907367:product/fireeye/fireeye-helix",
"forcepoint/forcepoint-casb": "365761988620:product/forcepoint/forcepoint-casb",
"forcepoint/forcepoint-cloud-security-gateway": ":product/forcepoint/forcepoint-cloud-security-gateway",
"forcepoint/forcepoint-dlp": "365761988620:product/forcepoint/forcepoint-dlp",
"forcepoint/forcepoint-ngfw": "365761988620:product/forcepoint/forcepoint-ngfw",
"fugue/fugue": ":product/fugue/fugue",
"guardicore/aws-infection-monkey": "324264561773:product/guardicore/aws-infection-monkey",
"guardicore/centra": "324264561773:product/guardicore/centra",
"hackerone/vulnerability-intelligence": ":product/hackerone/vulnerability-intelligence",
"ibm/qradar-siem": "949680696695:product/ibm/qradar-siem",
"juniper-networks/vsrx-next-generation-firewall": ":product/juniper-networks/vsrx-next-generation-firewall",
"k9-security/access-analyzer": ":product/k9-security/access-analyzer",
"lacework/lacework": ":product/lacework/lacework",
"logz-io/cloud-siem": ":product/logz-io/cloud-siem",
"mcafee-skyhigh/mcafee-mvision-cloud-aws": "297986523463:product/mcafee-skyhigh/mcafee-mvision-cloud-aws",
"micro-focus/arcsight": ":product/micro-focus/arcsight",
"netscout/netscout-cyber-investigator": ":product/netscout/netscout-cyber-investigator",
"pagerduty/pagerduty": ":product/pagerduty/pagerduty",
"paloaltonetworks/demisto": ":product/paloaltonetworks/demisto",
"paloaltonetworks/paloalto-networks-vmseries": ":product/paloaltonetworks/paloalto-networks-vmseries",
"paloaltonetworks/redlock": "188619942792:product/paloaltonetworks/redlock",
"prowler/prowler": ":product/prowler/prowler",
"qualys/qualys-vm": "805950163170:product/qualys/qualys-vm",
"rackspace/cloud-native-security": "530014582677:product/rackspace/cloud-native-security",
"rapid7/insight-connect": ":product/rapid7/insight-connect",
"rapid7/insightvm": "336818582268:product/rapid7/insightvm",
"rsa/archer": ":product/rsa/archer",
"secureclouddb/secureclouddb": ":product/secureclouddb/secureclouddb",
"sentinelone/endpoint-protection": ":product/sentinelone/endpoint-protection",
"servicenow/itsm": "842447150064:product/servicenow/itsm",
"slack/slack": "429538831549:product/slack/slack",
"sonrai-security/sonrai-dig": ":product/sonrai-security/sonrai-dig",
"sophos/sophos-server-protection": "062897671886:product/sophos/sophos-server-protection",
"splunk/phantom": ":product/splunk/phantom",
"splunk/splunk-enterprise": "112543817624:product/splunk/splunk-enterprise",
"stackrox/kubernetes-security": ":product/stackrox/kubernetes-security",
"sumologicinc/sumologic-mda": "956882708938:product/sumologicinc/sumologic-mda",
"symantec-corp/symantec-cwp": "754237914691:product/symantec-corp/symantec-cwp",
"sysdig/sysdig-secure-for-cloud": ":product/sysdig/sysdig-secure-for-cloud",
"tenable/tenable-io": "422820575223:product/tenable/tenable-io",
"threatmodeler-software/threatmodeler": ":product/threatmodeler-software/threatmodeler",
"turbot/turbot": "453761072151:product/turbot/turbot",
"twistlock/twistlock-enterprise": "496947949261:product/twistlock/twistlock-enterprise",
"vectra-ai/cognito-detect": "978576646331:product/vectra-ai/cognito-detect"
}
no
security_administrator_account_id AWS Security Administrator Account ID number n/a yes

Outputs

No outputs.