Disable security hub control from audit accounts for all the accounts under the organization using Terraform

Question

I am looking for a solution to disable security hub control from audit accounts for all the accounts under the organization using Terraform. Currently, I delegated audit account as admin of security hub.  Currently, I am working a project where a customer need to disable several number of securityhub control which is not applicable to their environment. How can I achieve it using Terraform? I already setup security hub orgazation using terraform. Please share the expertise

Answer

Thank you Rares Boboc! But I am using aws_securityhub_standards_control resources. But I want to disable the specific control from the organization, that means all the accounts under organization using Terraform. But I did not see that solutions.

Answer

You can use `aws_securityhub_standards_control` resource in terraform to manage controls.

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securityhub_standards_control

Answer

Hope it might help you in building the approach

Disabling Security Hub controls in a multi-account environment - https://aws.amazon.com/blogs/security/disabling-security-hub-controls-in-a-multi-account-environment/

https://github.com/hashicorp/terraform-provider-aws/issues/33406

Disable security hub control from audit accounts for all the accounts under the organization using Terraform

Relevant content