search

org-formation / aws-resource-providers

A community driven repository where you can find AWS Resource Type Providers for different purposes (including org-formation ones).
MIT License
88 stars 21 forks source link

Community::SecurityHub::Hub, Master & Members #27

Open OlafConijn opened 4 years ago

OlafConijn commented 4 years ago

Community::SecurityHub::Hub is a better AWS::SecurityHub::Hub

Loosely modeled after GuardDuty::Master and GuardDuty::Member.

SecurityHub supports inviting multiple accounts at once, therefore Members (plural). Master resource goes into the Mester accounts. Member resource goes into the Master account. This doesn't make complete sense for me, but it is how GuardDuty works...

  SecurityHubMembers:
    Type: Community::SecurityHub::Members
    Properties:
      MemberAccountIDs: List<String>

Community::SecurityHub::Members calls apis: 

  SecurityHubMaster:
    Type: Community::SecurityHub::Master
    Properties:
      MasterAccountId: String

Community::SecurityHub::Master calls apis:

  SecurityHub:
    Type: Community::SecurityHub::Hub
    Properties:
      AutoEnableControls: true | false # default true
      Standards: 
        EnablePCIDSS: true | false # default false
        EnableCISFoundations: true | false # default false
        EnableSecurityFoundations: true | false # default false

Community::SecurityHub::Hub. calls apis: