aws securityhub
Security Hub CSPM provides you with a comprehensive view of your security state in Amazon Web Services and helps you assess your Amazon Web Services environment against security industry standards and best practices. AWS CLI reference
126 commands Its page in the AWS CLI reference
Commands
accept-administrator-invitationWe recommend using Organizations instead of Security Hub CSPM invitations to manage your member accounts.accept-invitationThis method is deprecated.batch-delete-automation-rulesDeletes one or more automation rules.batch-disable-standardsDisables the standards specified by the provided StandardsSubscriptionArns.batch-enable-standardsEnables the standards specified by the provided StandardsArn.batch-get-automation-rulesRetrieves a list of details for automation rules based on rule Amazon Resource Names (ARNs).batch-get-configuration-policy-associationsReturns associations between an Security Hub CSPM configuration and a batch of target accounts, organizational units, or the root.batch-get-security-controlsProvides details about a batch of security controls for the current Amazon Web Services account and Amazon Web Services Region.batch-get-standards-control-associationsFor a batch of security controls and standards, identifies whether each control is currently enabled or disabled in a standard.batch-import-findingsImports security findings generated by a finding provider into Security Hub CSPM.batch-update-automation-rulesUpdates one or more automation rules based on rule Amazon Resource Names (ARNs) and input parameters.batch-update-findingsUsed by Security Hub CSPM customers to update information about their investigation into one or more findings.batch-update-findings-v2Updates information about a customer's investigation into a finding.batch-update-standards-control-associationsFor a batch of security controls and standards, this operation updates the enablement status of a control in a standard.cancel-export-job-v2Cancels a findings export job that is in progress.create-action-targetCreates a custom action target in Security Hub CSPM.create-aggregator-v2Enables aggregation across Amazon Web Services Regions.create-automation-ruleCreates an automation rule based on input parameters.create-automation-rule-v2Creates a V2 automation rule.create-configuration-policyCreates a configuration policy with the defined configuration.create-connectorCreates a connector to a third-party cloud provider in Security Hub CSPM.create-connector-v2Grants permission to create a connectorV2 based on input parameters.create-finding-aggregatorThe aggregation Region is now called the home Region.create-insightCreates a custom insight in Security Hub CSPM.create-membersCreates a member association in Security Hub CSPM between the specified accounts and the account used to make the request, which is the administrator account.create-ticket-v2Grants permission to create a ticket in the chosen ITSM based on finding information for the provided finding metadata UID.decline-invitationsWe recommend using Organizations instead of Security Hub CSPM invitations to manage your member accounts.delete-action-targetDeletes a custom action target from Security Hub CSPM.delete-aggregator-v2Deletes the Aggregator V2.delete-automation-rule-v2Deletes a V2 automation rule.delete-configuration-policyDeletes a configuration policy.delete-connectorDeletes a CSPM connector.delete-connector-v2Grants permission to delete a connectorV2.delete-finding-aggregatorThe aggregation Region is now called the home Region.delete-insightDeletes the insight specified by the InsightArn.delete-invitationsWe recommend using Organizations instead of Security Hub CSPM invitations to manage your member accounts.delete-membersDeletes the specified member accounts from Security Hub CSPM.describe-action-targetsReturns a list of the custom action targets in Security Hub CSPM in your account.describe-hubReturns details about the Hub resource in your account, including the HubArn and the time when you enabled Security Hub CSPM.describe-organization-configurationReturns information about the way your organization is configured in Security Hub CSPM.describe-productsReturns information about product integrations in Security Hub CSPM.describe-products-v2Gets information about the product integration.describe-security-hub-v2Returns details about the service resource in your account.describe-standardsReturns a list of the available standards in Security Hub CSPM.describe-standards-controlsReturns a list of security standards controls.disable-import-findings-for-productDisables the integration of the specified product with Security Hub CSPM.disable-organization-admin-accountDisables a Security Hub CSPM administrator account.disable-security-hubDisables Security Hub CSPM in your account only in the current Amazon Web Services Region.disable-security-hub-feature-v2Disables an opt-in feature for the calling account in the current Amazon Web Services Region.disable-security-hub-v2Disable the service for the current Amazon Web Services Region or specified Amazon Web Services Region.disassociate-from-administrator-accountDisassociates the current Security Hub CSPM member account from the associated administrator account.disassociate-from-master-accountThis method is deprecated.disassociate-membersDisassociates the specified member accounts from the associated administrator account.enable-import-findings-for-productEnables the integration of a partner product with Security Hub CSPM.enable-organization-admin-accountDesignates the Security Hub CSPM administrator account for an organization.enable-security-hubEnables Security Hub CSPM for your account in the current Region or the Region you specify in the request.enable-security-hub-feature-v2Enables an opt-in feature for the calling account in the current Amazon Web Services Region.enable-security-hub-v2Enables the service in account for the current Amazon Web Services Region or specified Amazon Web Services Region.generate-recommended-policy-v2Begins the recommended policy generation to remediate a Security Hub finding.get-administrator-accountProvides the details for the Security Hub CSPM administrator account for the current member account.get-aggregator-v2Returns the configuration of the specified Aggregator V2.get-automation-rule-v2Returns an automation rule for the V2 service.get-configuration-policyProvides information about a configuration policy.get-configuration-policy-associationReturns the association between a configuration and a target account, organizational unit, or the root.get-connectorRetrieves details for a CSPM connector based on the connector ID.get-connector-v2Grants permission to retrieve details for a connectorV2 based on connector id.get-enabled-standardsReturns a list of the standards that are currently enabled.get-export-job-v2Returns the details of a single findings export job, including its current Status, the Destination it writes to, the OutputConfiguration it was started with, and its StartedAt and EndedAt timestamps.get-finding-aggregatorThe aggregation Region is now called the home Region.get-finding-historyReturns the history of a Security Hub CSPM finding.get-finding-statistics-v2Returns aggregated statistical data about findings.get-findingsReturns a list of findings that match the specified criteria.get-findings-trends-v2Returns findings trend data based on the specified criteria.get-findings-v2Returns a list of findings that match the specified criteria.get-insight-resultsLists the results of the Security Hub CSPM insight specified by the insight ARN.get-insightsLists and describes insights for the specified insight ARNs.get-invitations-countWe recommend using Organizations instead of Security Hub CSPM invitations to manage your member accounts.get-master-accountThis method is deprecated.get-membersReturns the details for the Security Hub CSPM member accounts for the specified account IDs.get-recommended-policy-v2Retrieves the recommended policy to remediate a Security Hub finding.get-remediations-v2Retrieves remediation targets for the account, or for all member accounts if the caller is the delegated administrator.get-resources-statistics-v2Retrieves statistical information about Amazon Web Services resources and their associated security findings.get-resources-trends-v2Returns resource trend data based on the specified criteria.get-resources-v2Returns a list of resources.get-security-control-definitionRetrieves the definition of a security control.get-software-resources-v2Returns a list of resources that contain a specific software package.get-software-statistics-v2Retrieves aggregated counts of software packages installed on your resources, grouped by a field that you specify.get-software-v2Returns a list of software packages installed on your resources.invite-membersWe recommend using Organizations instead of Security Hub CSPM invitations to manage your member accounts.list-aggregators-v2Retrieves a list of V2 aggregators.list-automation-rulesA list of automation rules and their metadata for the calling account.list-automation-rules-v2Returns a list of automation rules and metadata for the calling account.list-configuration-policiesLists the configuration policies that the Security Hub CSPM delegated administrator has created for your organization.list-configuration-policy-associationsProvides information about the associations for your configuration policies and self-managed behavior.list-connectorsLists the CSPM connectors and their metadata for the calling account.list-connectors-v2Grants permission to retrieve a list of connectorsV2 and their metadata for the calling account.list-enabled-products-for-importLists all findings-generating solutions (products) that you are subscribed to receive findings from in Security Hub CSPM.list-export-jobs-v2Returns the findings export jobs in your account as a paginated list of ExportSummary objects.list-exposures-by-remediation-v2Retrieves the exposure findings tied to a specific remediation target.list-finding-aggregatorsIf cross-Region aggregation is enabled, then ListFindingAggregators returns the Amazon Resource Name (ARN) of the finding aggregator.list-free-trial-statuses-v2Lists the free trial status of Security Hub features.list-invitationsWe recommend using Organizations instead of Security Hub CSPM invitations to manage your member accounts.list-membersLists details about all member accounts for the current Security Hub CSPM administrator account.list-organization-admin-accountsLists the Security Hub CSPM administrator accounts.list-security-control-definitionsLists all of the security controls that apply to a specified standard.list-standards-control-associationsSpecifies whether a control is currently enabled or disabled in each enabled standard in the calling account.list-tags-for-resourceReturns a list of tags associated with a resource.register-connector-v2Grants permission to complete the authorization based on input parameters.start-configuration-policy-associationAssociates a target account, organizational unit, or the root with a specified configuration.start-configuration-policy-disassociationDisassociates a target account, organizational unit, or the root from a specified configuration.start-export-job-v2Starts an ad hoc export job that writes Security Hub findings to an Amazon Simple Storage Service (Amazon S3) bucket that you own.tag-resourceAdds one or more tags to a resource.untag-resourceRemoves one or more tags from a resource.update-action-targetUpdates the name and description of a custom action target in Security Hub CSPM.update-aggregator-v2Udpates the configuration for the Aggregator V2.update-automation-rule-v2Updates a V2 automation rule.update-configuration-policyUpdates a configuration policy.update-connectorUpdates a CSPM connector's configuration, such as the scope or regions for the connected cloud provider.update-connector-v2Grants permission to update a connectorV2 based on its id and input parameters.update-finding-aggregatorThe aggregation Region is now called the home Region.update-findingsUpdateFindings is a deprecated operation.update-insightUpdates the Security Hub CSPM insight identified by the specified insight ARN.update-organization-configurationUpdates the configuration of your organization in Security Hub CSPM.update-security-controlUpdates the properties of a security control.update-security-hub-configurationUpdates configuration options for Security Hub CSPM.update-standards-controlUsed to control whether an individual security standard control is enabled or disabled.