AWS Native is in preview. AWS Classic is fully supported.
aws-native.securityhub.PolicyAssociation
Explore with Pulumi AI
AWS Native is in preview. AWS Classic is fully supported.
The AWS::SecurityHub::PolicyAssociation resource represents the AWS Security Hub Central Configuration Policy associations in your Target. Only the AWS Security Hub delegated administrator can create the resouce from the home region.
Create PolicyAssociation Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new PolicyAssociation(name: string, args: PolicyAssociationArgs, opts?: CustomResourceOptions);
@overload
def PolicyAssociation(resource_name: str,
args: PolicyAssociationArgs,
opts: Optional[ResourceOptions] = None)
@overload
def PolicyAssociation(resource_name: str,
opts: Optional[ResourceOptions] = None,
configuration_policy_id: Optional[str] = None,
target_id: Optional[str] = None,
target_type: Optional[PolicyAssociationTargetType] = None)
func NewPolicyAssociation(ctx *Context, name string, args PolicyAssociationArgs, opts ...ResourceOption) (*PolicyAssociation, error)
public PolicyAssociation(string name, PolicyAssociationArgs args, CustomResourceOptions? opts = null)
public PolicyAssociation(String name, PolicyAssociationArgs args)
public PolicyAssociation(String name, PolicyAssociationArgs args, CustomResourceOptions options)
type: aws-native:securityhub:PolicyAssociation
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args PolicyAssociationArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args PolicyAssociationArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args PolicyAssociationArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args PolicyAssociationArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args PolicyAssociationArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
PolicyAssociation Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The PolicyAssociation resource accepts the following input properties:
- Configuration
Policy stringId - The universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration
- Target
Id string - The identifier of the target account, organizational unit, or the root
- Target
Type Pulumi.Aws Native. Security Hub. Policy Association Target Type - Indicates whether the target is an AWS account, organizational unit, or the organization root
- Configuration
Policy stringId - The universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration
- Target
Id string - The identifier of the target account, organizational unit, or the root
- Target
Type PolicyAssociation Target Type - Indicates whether the target is an AWS account, organizational unit, or the organization root
- configuration
Policy StringId - The universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration
- target
Id String - The identifier of the target account, organizational unit, or the root
- target
Type PolicyAssociation Target Type - Indicates whether the target is an AWS account, organizational unit, or the organization root
- configuration
Policy stringId - The universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration
- target
Id string - The identifier of the target account, organizational unit, or the root
- target
Type PolicyAssociation Target Type - Indicates whether the target is an AWS account, organizational unit, or the organization root
- configuration_
policy_ strid - The universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration
- target_
id str - The identifier of the target account, organizational unit, or the root
- target_
type PolicyAssociation Target Type - Indicates whether the target is an AWS account, organizational unit, or the organization root
- configuration
Policy StringId - The universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration
- target
Id String - The identifier of the target account, organizational unit, or the root
- target
Type "ACCOUNT" | "ORGANIZATIONAL_UNIT" | "ROOT" - Indicates whether the target is an AWS account, organizational unit, or the organization root
Outputs
All input properties are implicitly available as output properties. Additionally, the PolicyAssociation resource produces the following output properties:
- Association
Identifier string - A unique identifier to indicates if the target has an association
- Association
Status Pulumi.Aws Native. Security Hub. Policy Association Association Status - The current status of the association between the specified target and the configuration
- Association
Status stringMessage - An explanation for a FAILED value for AssociationStatus
- Association
Type Pulumi.Aws Native. Security Hub. Policy Association Association Type - Indicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent
- Id string
- The provider-assigned unique ID for this managed resource.
- Updated
At string - The date and time, in UTC and ISO 8601 format, that the configuration policy association was last updated
- Association
Identifier string - A unique identifier to indicates if the target has an association
- Association
Status PolicyAssociation Association Status - The current status of the association between the specified target and the configuration
- Association
Status stringMessage - An explanation for a FAILED value for AssociationStatus
- Association
Type PolicyAssociation Association Type - Indicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent
- Id string
- The provider-assigned unique ID for this managed resource.
- Updated
At string - The date and time, in UTC and ISO 8601 format, that the configuration policy association was last updated
- association
Identifier String - A unique identifier to indicates if the target has an association
- association
Status PolicyAssociation Association Status - The current status of the association between the specified target and the configuration
- association
Status StringMessage - An explanation for a FAILED value for AssociationStatus
- association
Type PolicyAssociation Association Type - Indicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent
- id String
- The provider-assigned unique ID for this managed resource.
- updated
At String - The date and time, in UTC and ISO 8601 format, that the configuration policy association was last updated
- association
Identifier string - A unique identifier to indicates if the target has an association
- association
Status PolicyAssociation Association Status - The current status of the association between the specified target and the configuration
- association
Status stringMessage - An explanation for a FAILED value for AssociationStatus
- association
Type PolicyAssociation Association Type - Indicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent
- id string
- The provider-assigned unique ID for this managed resource.
- updated
At string - The date and time, in UTC and ISO 8601 format, that the configuration policy association was last updated
- association_
identifier str - A unique identifier to indicates if the target has an association
- association_
status PolicyAssociation Association Status - The current status of the association between the specified target and the configuration
- association_
status_ strmessage - An explanation for a FAILED value for AssociationStatus
- association_
type PolicyAssociation Association Type - Indicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent
- id str
- The provider-assigned unique ID for this managed resource.
- updated_
at str - The date and time, in UTC and ISO 8601 format, that the configuration policy association was last updated
- association
Identifier String - A unique identifier to indicates if the target has an association
- association
Status "SUCCESS" | "PENDING" | "FAILED" - The current status of the association between the specified target and the configuration
- association
Status StringMessage - An explanation for a FAILED value for AssociationStatus
- association
Type "APPLIED" | "INHERITED" - Indicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent
- id String
- The provider-assigned unique ID for this managed resource.
- updated
At String - The date and time, in UTC and ISO 8601 format, that the configuration policy association was last updated
Supporting Types
PolicyAssociationAssociationStatus, PolicyAssociationAssociationStatusArgs
- Success
- SUCCESS
- Pending
- PENDING
- Failed
- FAILED
- Policy
Association Association Status Success - SUCCESS
- Policy
Association Association Status Pending - PENDING
- Policy
Association Association Status Failed - FAILED
- Success
- SUCCESS
- Pending
- PENDING
- Failed
- FAILED
- Success
- SUCCESS
- Pending
- PENDING
- Failed
- FAILED
- SUCCESS
- SUCCESS
- PENDING
- PENDING
- FAILED
- FAILED
- "SUCCESS"
- SUCCESS
- "PENDING"
- PENDING
- "FAILED"
- FAILED
PolicyAssociationAssociationType, PolicyAssociationAssociationTypeArgs
- Applied
- APPLIED
- Inherited
- INHERITED
- Policy
Association Association Type Applied - APPLIED
- Policy
Association Association Type Inherited - INHERITED
- Applied
- APPLIED
- Inherited
- INHERITED
- Applied
- APPLIED
- Inherited
- INHERITED
- APPLIED
- APPLIED
- INHERITED
- INHERITED
- "APPLIED"
- APPLIED
- "INHERITED"
- INHERITED
PolicyAssociationTargetType, PolicyAssociationTargetTypeArgs
- Account
- ACCOUNT
- Organizational
Unit - ORGANIZATIONAL_UNIT
- Root
- ROOT
- Policy
Association Target Type Account - ACCOUNT
- Policy
Association Target Type Organizational Unit - ORGANIZATIONAL_UNIT
- Policy
Association Target Type Root - ROOT
- Account
- ACCOUNT
- Organizational
Unit - ORGANIZATIONAL_UNIT
- Root
- ROOT
- Account
- ACCOUNT
- Organizational
Unit - ORGANIZATIONAL_UNIT
- Root
- ROOT
- ACCOUNT
- ACCOUNT
- ORGANIZATIONAL_UNIT
- ORGANIZATIONAL_UNIT
- ROOT
- ROOT
- "ACCOUNT"
- ACCOUNT
- "ORGANIZATIONAL_UNIT"
- ORGANIZATIONAL_UNIT
- "ROOT"
- ROOT
Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
AWS Native is in preview. AWS Classic is fully supported.