This module sets up Security Hub in an account with option to send findings to slack and/or email.
The following resources will be created:
- SecurityHub
- Lambda function to send slack notifications (created using cloudformation, based on https://github.com/aws-samples/aws-securityhub-to-slack).
- EventBridge Rules
No requirements.
Name | Version |
---|---|
aws | n/a |
random | n/a |
Name | Description | Type | Default | Required |
---|---|---|---|---|
alarm_email | Enables email notification (optional) | string |
"" |
no |
alarm_slack_endpoint | Enables slack notification to endpoint passed (optional) | string |
"" |
no |
invite | Invite member accounts? (Use 'false' when this account is the delegated admin by master account) | bool |
true |
no |
members | List of member AWS accounts as [{account_id: '9999', email: 'a@b.com'}, {...}] } | list |
[] |
no |
severity_list | n/a | list |
[ |
no |
subscription_cis | Enables CIS Foundations Benchmark Standards subscription | bool |
false |
no |
subscription_foundational | Enables AWS Foundational Security Best Practices subscription | bool |
false |
no |
subscription_pci | Enables PCI-DSS Standards subscription | bool |
false |
no |
No output.
Module managed by DNX Solutions.
Apache 2 Licensed. See LICENSE for full details.