Closed martinklie closed 4 years ago
I am using this and it seems to work for me:
./enablesecurityhub.py --master_account 11111111111 --assume_role AdministratorAccess --enabled_regions us-east-1,us-east-2 --enable_standards arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0,standards/aws-foundational-security-best-practices/v/1.0.0 accounts.csv
Note the new rule set doesn't need the arn:aws:securityhub prefix.
Correct the script is setup such that no updates are required for new standards, for all those expect the CIS benchmarks the format is standards/
Any updates needed to enable https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp-controls.html
As well can we please share the syntax to enable. Thanks in advanced.