AWS Security Hub CSPM

1# yaml-language-server: $schema=../../schema/component.schema.json
2# AWS Security Hub CSPM: aggregates findings from AWS security services and partner products and
3# runs control checks against security standards. "Turning off automatically enabled security
4# standards": the default standards are AWS Foundational Security Best Practices and CIS AWS
5# Foundations Benchmark v1.2.0, and enabling a standard enables every control in it. "Creating and
6# updating findings": active findings are stored for 90 days, archived findings for 30. Most
7# control checks require AWS Config resource recording.
8schemaVersion: "1"
9type: "component"
10id: "aws-security-hub"
11kind: "monitoring"
12provider: "aws"
13docs: "https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html"
14defaults:
15  signal: "alerts"
16  collectorMode: "push"
17  retentionDays: 90
18  independentOfMonitored: false
19  managed: true
20properties:
21  foundationalSecurityBestPractices:
22    type: "boolean"
23    default: true
24  cisFoundationsBenchmark:
25    type: "boolean"
26    default: true
27  configurationMode:
28    type: "enum"
29    values: ["local", "central"]
30    default: "local"
31  crossRegionAggregation:
32    type: "boolean"
33    default: false
34  automationRules:
35    type: "boolean"
36    default: false