Disable security hub control from audit accounts for all the accounts under the organization using Terraform

0

I am looking for a solution to disable security hub control from audit accounts for all the accounts under the organization using Terraform. Currently, I delegated audit account as admin of security hub. Currently, I am working a project where a customer need to disable several number of securityhub control which is not applicable to their environment. How can I achieve it using Terraform? I already setup security hub orgazation using terraform. Please share the expertise

3 個答案
0

You can use aws_securityhub_standards_control resource in terraform to manage controls.

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securityhub_standards_control

profile picture
已回答 6 個月前
0

Thank you Rares Boboc! But I am using aws_securityhub_standards_control resources. But I want to disable the specific control from the organization, that means all the accounts under organization using Terraform. But I did not see that solutions.

profile picture
已回答 6 個月前
0

Hope it might help you in building the approach

Disabling Security Hub controls in a multi-account environment - https://aws.amazon.com/blogs/security/disabling-security-hub-controls-in-a-multi-account-environment/

https://github.com/hashicorp/terraform-provider-aws/issues/33406

profile picture
已回答 5 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南