Skip to content

Files

Latest commit

nozaqnozaq
feat: enable CIS benchmark v1.4.0 standard (#308)
Dec 3, 2022
bb724cd · Dec 3, 2022

History

History

securityhub-baseline

README.md

securityhub-baseline

Features

  • Enable SecurityHub.
  • Subscribe CIS benchmark standard.
  • Subscribe PCI DSS standard.
  • Subscribe AWS Foundational security best practices standard.

Requirements

Name Version
terraform >= 1.1.4
aws >= 4.3

Providers

Name Version
aws >= 4.3

Inputs

Name Description Type Required
aggregate_findings Boolean whether to enable finding aggregator for every region bool no
enable_aws_foundational_standard Boolean whether AWS Foundations standard is enabled. bool no
enable_cis_standard Boolean whether CIS standard is enabled. bool no
enable_pci_dss_standard Boolean whether PCI DSS standard is enabled. bool no
enable_product_arns List of Security Hub product ARNs, <REGION> will be replaced. See https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-partner-providers.html for list. list(string) no
master_account_id AWS account ID for master account. string no
member_accounts A list of IDs and emails of AWS accounts which associated as member accounts. 
list(object({
    account_id = string
    email      = string
  }))
 no

Outputs

No outputs.