securityhub-baseline

securityhub-baseline

Features

• Enable SecurityHub.
• Subscribe CIS benchmark standard.
• Subscribe PCI DSS standard.
• Subscribe AWS Foundational security best practices standard.

Requirements

Name	Version
terraform	>= 1.1.4
aws	>= 4.2.0

Providers

Name	Version
aws	>= 4.2.0

Inputs

Name	Description	Type	Required
aggregate_findings	Boolean whether to enable finding aggregator for every region	bool	no
enable_aws_foundational_standard	Boolean whether AWS Foundations standard is enabled.	bool	no
enable_cis_standard	Boolean whether CIS standard is enabled.	bool	no
enable_pci_dss_standard	Boolean whether PCI DSS standard is enabled.	bool	no
enable_product_arns	List of Security Hub product ARNs, <REGION> will be replaced. See https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-partner-providers.html for list.	list(string)	no
master_account_id	AWS account ID for master account.	string	no
member_accounts	A list of IDs and emails of AWS accounts which associated as member accounts.	list(object({ account_id = string email = string }))	no

Outputs

No outputs.