enabled_standards

Creates, updates, deletes, gets or lists an enabled_standards resource.

Overview

Name	enabled_standards
Type	Resource
Id	aws.securityhub.enabled_standards

Fields

The following fields are returned by SELECT queries:

get_enabled_standards

Name	Datatype	Description
provider	string	The cloud provider whose resources the standard evaluates. For example, AWS or Azure. (AWS, Azure)
standards_arn	string	The ARN of the standard. (pattern: <code>.\S.</code>)
standards_controls_updatable	string	Specifies whether you can retrieve information about and configure individual controls that apply to the standard. Possible values are: READY_FOR_UPDATES - Controls in the standard can be retrieved and configured. NOT_READY_FOR_UPDATES - Controls in the standard cannot be retrieved or configured. (READY_FOR_UPDATES, NOT_READY_FOR_UPDATES)
standards_input	object	A key-value pair of input for the standard.
standards_status	string	The status of your subscription to the standard. Possible values are: PENDING - The standard is in the process of being enabled. Or the standard is already enabled and Security Hub CSPM is adding new controls to the standard. READY - The standard is enabled. INCOMPLETE - The standard could not be enabled completely. One or more errors (StandardsStatusReason) occurred when Security Hub CSPM attempted to enable the standard. DELETING - The standard is in the process of being disabled. FAILED - The standard could not be disabled. One or more errors (StandardsStatusReason) occurred when Security Hub CSPM attempted to disable the standard. (PENDING, READY, FAILED, DELETING, INCOMPLETE)
standards_status_reason	object	The reason for the current status.
standards_subscription_arn	string	The ARN of the resource that represents your subscription to the standard. (pattern: <code>.\S.</code>)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_enabled_standards	select	region		Returns a list of the standards that are currently enabled.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

get_enabled_standards

Returns a list of the standards that are currently enabled.

SELECT
provider,
standards_arn,
standards_controls_updatable,
standards_input,
standards_status,
standards_status_reason,
standards_subscription_arn
FROM aws.securityhub.enabled_standards
WHERE region = '{{ region }}' -- required
;