-
Notifications
You must be signed in to change notification settings - Fork 0
/
securityhub.tf
32 lines (26 loc) · 1.24 KB
/
securityhub.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
resource "aws_securityhub_account" "default" {}
resource "aws_securityhub_standards_subscription" "pci" {
count = var.subscription_pci ? 1 : 0
depends_on = [aws_securityhub_account.default]
standards_arn = "arn:aws:securityhub:${data.aws_region.current.name}::standards/pci-dss/v/3.2.1"
}
resource "aws_securityhub_standards_subscription" "cis" {
count = var.subscription_cis ? 1 : 0
depends_on = [aws_securityhub_account.default]
standards_arn = "arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0"
}
resource "aws_securityhub_standards_subscription" "foundational" {
count = var.subscription_foundational ? 1 : 0
depends_on = [aws_securityhub_account.default]
standards_arn = "arn:aws:securityhub:${data.aws_region.current.name}::standards/aws-foundational-security-best-practices/v/1.0.0"
}
resource "aws_securityhub_organization_admin_account" "admin" {
count = var.admin_account_id != null ? 1 : 0
admin_account_id = var.admin_account_id
}
resource "aws_securityhub_member" "member" {
count = length(var.member_accounts)
account_id = var.member_accounts[count.index].account_id
email = var.member_accounts[count.index].email
invite = var.invite_member
}