@swamp/aws/securityhub
v2026.04.23.3
AWS SECURITYHUB infrastructure models
Repository
https://github.com/systeminit/swamp-extensions
Labels
awssecurityhubcloudinfrastructure
Contents
Quality score
Verified by SwampHow well-documented and verifiable this extension is.
Grade A
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types1/1earned
- Has description1/1earned
- At least one platform tag (or universal)1/1earned
- Two or more platform tags (or universal)1/1earned
- License declared1/1earned
- Verified public repository2/2earned
Install
$ swamp extension pull @swamp/aws/securityhub@swamp/aws/securityhub/aggregator-v2v2026.04.23.2aggregator_v2.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| RegionLinkingMode | enum | Indicates to link a list of included Regions |
| LinkedRegions | array | The list of included Regions |
| Tags? | record | A key-value pair to associate with the Security Hub V2 resource. |
createCreate a SecurityHub AggregatorV2
getGet a SecurityHub AggregatorV2
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub AggregatorV2 |
updateUpdate a SecurityHub AggregatorV2
deleteDelete a SecurityHub AggregatorV2
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub AggregatorV2 |
syncSync SecurityHub AggregatorV2 state from AWS
Resources
state(infinite)— SecurityHub AggregatorV2 resource state
@swamp/aws/securityhub/automation-rulev2026.04.23.2automation_rule.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| RuleStatus? | enum | Whether the rule is active after it is created. If this parameter is equal to ENABLED, ASH applies the rule to findings and finding updates after the rule is created. |
| RuleOrder | number | An integer ranging from 1 to 1000 that represents the order in which the rule action is applied to findings. Security Hub CSPM applies rules with lower values for this parameter first. |
| Description | string | A description of the rule. |
| RuleName | string | The name of the rule. |
| IsTerminal? | boolean | Specifies whether a rule is the last to be applied with respect to a finding that matches the rule criteria. This is useful when a finding matches the criteria for multiple rules, and each rule has different actions. If a rule is terminal, Security Hub CSPM applies the rule action to a finding that matches the rule criteria and doesn't evaluate other rules for the finding. By default, a rule isn't terminal. |
| Actions | array | One or more actions to update finding fields if a finding matches the conditions specified in Criteria. |
| Criteria | object | A set of [Security Finding Format (ASFF)](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html) finding field attributes and corresponding expected values that ASH uses to filter findings. If a rule is enabled and a finding matches the criteria specified in this parameter, ASH applies the rule action to the finding. |
| Tags? | record | User-defined tags associated with an automation rule. |
createCreate a SecurityHub AutomationRule
getGet a SecurityHub AutomationRule
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub AutomationRule |
updateUpdate a SecurityHub AutomationRule
deleteDelete a SecurityHub AutomationRule
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub AutomationRule |
syncSync SecurityHub AutomationRule state from AWS
Resources
state(infinite)— SecurityHub AutomationRule resource state
@swamp/aws/securityhub/automation-rule-v2v2026.04.23.2automation_rule_v2.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| RuleName | string | The name of the automation rule |
| RuleStatus? | enum | The status of the automation rule |
| Description | string | A description of the automation rule |
| RuleOrder | number | The value for the rule priority |
| Criteria | object | Defines the parameters and conditions used to evaluate and filter security findings |
| Actions | array | A list of actions to be performed when the rule criteria is met |
| Tags? | record | A key-value pair to associate with a resource. |
createCreate a SecurityHub AutomationRuleV2
getGet a SecurityHub AutomationRuleV2
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub AutomationRuleV2 |
updateUpdate a SecurityHub AutomationRuleV2
deleteDelete a SecurityHub AutomationRuleV2
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub AutomationRuleV2 |
syncSync SecurityHub AutomationRuleV2 state from AWS
Resources
state(infinite)— SecurityHub AutomationRuleV2 resource state
@swamp/aws/securityhub/configuration-policyv2026.04.23.2configuration_policy.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| Name | string | The name of the configuration policy. |
| Description? | string | The description of the configuration policy. |
| ConfigurationPolicy | object | An object that defines how Security Hub is configured. |
| Tags? | record | A key-value pair to associate with a resource. |
createCreate a SecurityHub ConfigurationPolicy
getGet a SecurityHub ConfigurationPolicy
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub ConfigurationPolicy |
updateUpdate a SecurityHub ConfigurationPolicy
deleteDelete a SecurityHub ConfigurationPolicy
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub ConfigurationPolicy |
syncSync SecurityHub ConfigurationPolicy state from AWS
Resources
state(infinite)— SecurityHub ConfigurationPolicy resource state
@swamp/aws/securityhub/connector-v2v2026.04.23.2connector_v2.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| Name | string | The name of the connector |
| Description? | string | A description of the connector |
| KmsKeyArn? | string | The ARN of KMS key used for the connector |
| Provider | string | The third-party provider configuration for the connector |
| Tags? | record | A key-value pair to associate with a resource. |
createCreate a SecurityHub ConnectorV2
getGet a SecurityHub ConnectorV2
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub ConnectorV2 |
updateUpdate a SecurityHub ConnectorV2
deleteDelete a SecurityHub ConnectorV2
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub ConnectorV2 |
syncSync SecurityHub ConnectorV2 state from AWS
Resources
state(infinite)— SecurityHub ConnectorV2 resource state
@swamp/aws/securityhub/delegated-adminv2026.04.23.2delegated_admin.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| AdminAccountId | string | The AWS-account identifier of the account to designate as the Security Hub CSPM administrator account. |
createCreate a SecurityHub DelegatedAdmin
getGet a SecurityHub DelegatedAdmin
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub DelegatedAdmin |
deleteDelete a SecurityHub DelegatedAdmin
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub DelegatedAdmin |
syncSync SecurityHub DelegatedAdmin state from AWS
Resources
state(infinite)— SecurityHub DelegatedAdmin resource state
@swamp/aws/securityhub/finding-aggregatorv2026.04.23.2finding_aggregator.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| RegionLinkingMode | enum | Indicates whether to aggregate findings from all of the available Regions in the current partition. Also determines whether to automatically aggregate findings from new Regions as Security Hub supports them and you opt into them. The selected option also determines how to use the Regions provided in the Regions list. In CFN, the options for this property are as follows: ALL_REGIONS - Indicates to aggregate findings from all of the Regions where Security Hub is enabled. When you choose this optio |
| Regions? | array | If RegionLinkingMode is ALL_REGIONS_EXCEPT_SPECIFIED, then this is a space-separated list of Regions that do not aggregate findings to the aggregation Region. If RegionLinkingMode is SPECIFIED_REGIONS, then this is a space-separated list of Regions that do aggregate findings to the aggregation Region. |
createCreate a SecurityHub FindingAggregator
getGet a SecurityHub FindingAggregator
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub FindingAggregator |
updateUpdate a SecurityHub FindingAggregator
deleteDelete a SecurityHub FindingAggregator
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub FindingAggregator |
syncSync SecurityHub FindingAggregator state from AWS
Resources
state(infinite)— SecurityHub FindingAggregator resource state
@swamp/aws/securityhub/hubv2026.04.23.2hub.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| EnableDefaultStandards? | boolean | Whether to enable the security standards that Security Hub has designated as automatically enabled. |
| ControlFindingGenerator? | string | This field, used when enabling Security Hub, specifies whether the calling account has consolidated control findings turned on. If the value for this field is set to SECURITY_CONTROL, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards. If the value for this field is set to STANDARD_CONTROL, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards. |
| AutoEnableControls? | boolean | Whether to automatically enable new controls when they are added to standards that are enabled |
| Tags? | record | A key-value pair to associate with a resource. |
createCreate a SecurityHub Hub
getGet a SecurityHub Hub
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub Hub |
updateUpdate a SecurityHub Hub
deleteDelete a SecurityHub Hub
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub Hub |
syncSync SecurityHub Hub state from AWS
Resources
state(infinite)— SecurityHub Hub resource state
@swamp/aws/securityhub/hub-v2v2026.04.23.2hub_v2.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| Tags? | record | A key-value pair to associate with the Security Hub V2 resource. You can specify a key that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _,., /, =, +, and -. |
createCreate a SecurityHub HubV2
getGet a SecurityHub HubV2
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub HubV2 |
updateUpdate a SecurityHub HubV2
deleteDelete a SecurityHub HubV2
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub HubV2 |
syncSync SecurityHub HubV2 state from AWS
Resources
state(infinite)— SecurityHub HubV2 resource state
@swamp/aws/securityhub/insightv2026.04.23.2insight.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| Name | string | The name of a Security Hub insight |
| Filters | object | One or more attributes used to filter the findings included in the insight |
| GroupByAttribute | string | The grouping attribute for the insight's findings |
createCreate a SecurityHub Insight
getGet a SecurityHub Insight
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub Insight |
updateUpdate a SecurityHub Insight
deleteDelete a SecurityHub Insight
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub Insight |
syncSync SecurityHub Insight state from AWS
Resources
state(infinite)— SecurityHub Insight resource state
@swamp/aws/securityhub/organization-configurationv2026.04.23.2organization_configuration.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| AutoEnable | boolean | Whether to automatically enable Security Hub in new member accounts when they join the organization. |
| AutoEnableStandards? | enum | Whether to automatically enable Security Hub default standards in new member accounts when they join the organization. |
| ConfigurationType? | enum | Indicates whether the organization uses local or central configuration. |
createCreate a SecurityHub OrganizationConfiguration
getGet a SecurityHub OrganizationConfiguration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub OrganizationConfiguration |
updateUpdate a SecurityHub OrganizationConfiguration
deleteDelete a SecurityHub OrganizationConfiguration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub OrganizationConfiguration |
syncSync SecurityHub OrganizationConfiguration state from AWS
Resources
state(infinite)— SecurityHub OrganizationConfiguration resource state
@swamp/aws/securityhub/policy-associationv2026.04.23.2policy_association.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| ConfigurationPolicyId | string | The universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration |
| TargetId | string | The identifier of the target account, organizational unit, or the root |
| TargetType | enum | Indicates whether the target is an AWS account, organizational unit, or the organization root |
createCreate a SecurityHub PolicyAssociation
getGet a SecurityHub PolicyAssociation
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub PolicyAssociation |
updateUpdate a SecurityHub PolicyAssociation
deleteDelete a SecurityHub PolicyAssociation
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub PolicyAssociation |
syncSync SecurityHub PolicyAssociation state from AWS
Resources
state(infinite)— SecurityHub PolicyAssociation resource state
@swamp/aws/securityhub/product-subscriptionv2026.04.23.2product_subscription.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| ProductArn | string | The generic ARN of the product being subscribed to |
createCreate a SecurityHub ProductSubscription
getGet a SecurityHub ProductSubscription
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub ProductSubscription |
deleteDelete a SecurityHub ProductSubscription
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub ProductSubscription |
syncSync SecurityHub ProductSubscription state from AWS
Resources
state(infinite)— SecurityHub ProductSubscription resource state
@swamp/aws/securityhub/security-controlv2026.04.23.2security_control.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| SecurityControlId? | string | The unique identifier of a security control across standards. Values for this field typically consist of an AWS service name and a number, such as APIGateway.3. |
| SecurityControlArn? | string | The Amazon Resource Name (ARN) for a security control across standards, such as `arn:aws:securityhub:eu-central-1:123456789012:security-control/S3.1`. This parameter doesn't mention a specific standard. |
| LastUpdateReason? | string | The most recent reason for updating the customizable properties of a security control. This differs from the UpdateReason field of the BatchUpdateStandardsControlAssociations API, which tracks the reason for updating the enablement status of a control. This field accepts alphanumeric characters in addition to white spaces, dashes, and underscores. |
| Parameters | record | An object that identifies the name of a control parameter, its current value, and whether it has been customized. |
createCreate a SecurityHub SecurityControl
getGet a SecurityHub SecurityControl
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub SecurityControl |
updateUpdate a SecurityHub SecurityControl
deleteDelete a SecurityHub SecurityControl
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub SecurityControl |
syncSync SecurityHub SecurityControl state from AWS
Resources
state(infinite)— SecurityHub SecurityControl resource state
@swamp/aws/securityhub/standardv2026.04.23.2standard.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| StandardsArn | string | The ARN of the standard that you want to enable. To view a list of available ASH standards and their ARNs, use the [DescribeStandards](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation. |
| DisabledStandardsControls? | array | Specifies which controls are to be disabled in a standard. *Maximum*: 100 |
createCreate a SecurityHub Standard
getGet a SecurityHub Standard
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub Standard |
updateUpdate a SecurityHub Standard
deleteDelete a SecurityHub Standard
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SecurityHub Standard |
syncSync SecurityHub Standard state from AWS
Resources
state(infinite)— SecurityHub Standard resource state
2026.04.23.22.9 MBApr 23, 2026
AWS SECURITYHUB infrastructure models
Release Notes
- Updated: aggregator_v2, automation_rule, automation_rule_v2, configuration_policy, connector_v2, delegated_admin, finding_aggregator, hub, hub_v2, insight, organization_configuration, policy_association, product_subscription, security_control, standard
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awssecurityhubcloudinfrastructure
2026.04.03.22.9 MBApr 3, 2026
AWS SECURITYHUB infrastructure models
Release Notes
- Updated: aggregator_v2, automation_rule, automation_rule_v2, configuration_policy, connector_v2, delegated_admin, finding_aggregator, hub, hub_v2, insight, organization_configuration, policy_association, product_subscription, security_control, standard
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awssecurityhubcloudinfrastructure
2026.03.19.13.1 MBMar 19, 2026
AWS SECURITYHUB infrastructure models
Release Notes
- Updated: aggregator_v2, automation_rule, automation_rule_v2, configuration_policy, connector_v2, delegated_admin, finding_aggregator, hub, hub_v2, insight, organization_configuration, policy_association, product_subscription, security_control, standard
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awssecurityhubcloudinfrastructure
2026.03.16.13.0 MBMar 16, 2026
AWS SECURITYHUB infrastructure models
Release Notes
- Updated: aggregator_v2, automation_rule, automation_rule_v2, configuration_policy, connector_v2, delegated_admin, finding_aggregator, hub, hub_v2, insight, organization_configuration, policy_association, product_subscription, security_control, standard
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awssecurityhubcloudinfrastructure
2026.03.10.53.0 MBMar 10, 2026
AWS SECURITYHUB infrastructure models
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awssecurityhubcloudinfrastructure