security_controls

Creates, updates, deletes, gets or lists a security_controls resource.

Overview

Name	security_controls
Type	Resource
Id	aws.securityhub.security_controls

Fields

The following fields are returned by SELECT queries:

batch_get_security_controls

Name	Datatype	Description
security_controls	array	An array that returns the identifier, Amazon Resource Name (ARN), and other details about a security control. The same information is returned whether the request includes SecurityControlId or SecurityControlArn.
unprocessed_ids	array	A security control (identified with SecurityControlId, SecurityControlArn, or a mix of both parameters) for which details cannot be returned.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
batch_get_security_controls	select	region		Provides details about a batch of security controls for the current Amazon Web Services account and Amazon Web Services Region.
update_security_control	update	region, SecurityControlId, Parameters		Updates the properties of a security control.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

batch_get_security_controls

Provides details about a batch of security controls for the current Amazon Web Services account and Amazon Web Services Region.

SELECT
security_controls,
unprocessed_ids
FROM aws.securityhub.security_controls
WHERE region = '{{ region }}' -- required
;

UPDATE examples

update_security_control

Updates the properties of a security control.

UPDATE aws.securityhub.security_controls
SET 
SecurityControlId = '{{ SecurityControlId }}',
Parameters = '{{ Parameters }}',
LastUpdateReason = '{{ LastUpdateReason }}'
WHERE 
region = '{{ region }}' --required
AND SecurityControlId = '{{ SecurityControlId }}' --required
AND Parameters = '{{ Parameters }}' --required;