feat: enable CIS benchmark v1.4.0 standard (#308)

nozaq · Dec 3, 2022 · bb724cd · bb724cd
1 parent 07dc101
commit bb724cd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/securityhub-baseline/main.tf b/modules/securityhub-baseline/main.tf
@@ -43,7 +43,7 @@ resource "aws_securityhub_invite_accepter" "invitee" {
 resource "aws_securityhub_standards_subscription" "cis" {
   count = var.enable_cis_standard ? 1 : 0
 
-  standards_arn = "arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0"
+  standards_arn = "arn:aws:securityhub:${data.aws_region.current.name}::standards/cis-aws-foundations-benchmark/v/1.4.0"
 
   depends_on = [aws_securityhub_account.main]
 }