@ThreadSafe @Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class AWSSecurityHubClient extends AmazonWebServiceClient implements AWSSecurityHub
AWS Security Hub provides you with a comprehensive view of your security state within AWS and your compliance with the security industry standards and best practices. Security Hub collects security data from across AWS accounts, services, and supported third-party partners and helps you analyze your security trends and identify the highest priority security issues. For more information, see AWS Security Hub User Guide.
Currently, AWS Security Hub is in Preview release.
LOGGING_AWS_REQUEST_METRIC
ENDPOINT_PREFIX
Modifier and Type | Method and Description |
---|---|
AcceptInvitationResult |
acceptInvitation(AcceptInvitationRequest request)
Accepts the invitation to be monitored by a master SecurityHub account.
|
BatchDisableStandardsResult |
batchDisableStandards(BatchDisableStandardsRequest request)
Disables the standards specified by the standards subscription ARNs.
|
BatchEnableStandardsResult |
batchEnableStandards(BatchEnableStandardsRequest request)
Enables the standards specified by the standards ARNs.
|
BatchImportFindingsResult |
batchImportFindings(BatchImportFindingsRequest request)
Imports security findings that are generated by the integrated third-party products into Security Hub.
|
static AWSSecurityHubClientBuilder |
builder() |
CreateInsightResult |
createInsight(CreateInsightRequest request)
Creates an insight, which is a consolidation of findings that identifies a security area that requires attention
or intervention.
|
CreateMembersResult |
createMembers(CreateMembersRequest request)
Creates member Security Hub accounts in the current AWS account (which becomes the master Security Hub account)
that has Security Hub enabled.
|
DeclineInvitationsResult |
declineInvitations(DeclineInvitationsRequest request)
Declines invitations that are sent to this AWS account (invitee) by the AWS accounts (inviters) that are
specified by the account IDs.
|
DeleteInsightResult |
deleteInsight(DeleteInsightRequest request)
Deletes an insight that is specified by the insight ARN.
|
DeleteInvitationsResult |
deleteInvitations(DeleteInvitationsRequest request)
Deletes invitations that are sent to this AWS account (invitee) by the AWS accounts (inviters) that are specified
by their account IDs.
|
DeleteMembersResult |
deleteMembers(DeleteMembersRequest request)
Deletes the Security Hub member accounts that are specified by the account IDs.
|
DisableImportFindingsForProductResult |
disableImportFindingsForProduct(DisableImportFindingsForProductRequest request)
Cancels the subscription that allows a findings-generating solution (product) to import its findings into
Security Hub.
|
DisableSecurityHubResult |
disableSecurityHub(DisableSecurityHubRequest request)
Disables the AWS Security Hub Service.
|
DisassociateFromMasterAccountResult |
disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request)
Disassociates the current Security Hub member account from its master account.
|
DisassociateMembersResult |
disassociateMembers(DisassociateMembersRequest request)
Disassociates the Security Hub member accounts that are specified by the account IDs from their master account.
|
EnableImportFindingsForProductResult |
enableImportFindingsForProduct(EnableImportFindingsForProductRequest request)
Sets up the subscription that enables a findings-generating solution (product) to import its findings into
Security Hub.
|
EnableSecurityHubResult |
enableSecurityHub(EnableSecurityHubRequest request)
Enables the AWS Security Hub service.
|
ResponseMetadata |
getCachedResponseMetadata(AmazonWebServiceRequest request)
Returns additional metadata for a previously executed successful, request, typically used for debugging issues
where a service isn't acting as expected.
|
GetEnabledStandardsResult |
getEnabledStandards(GetEnabledStandardsRequest request)
Lists and describes enabled standards.
|
GetFindingsResult |
getFindings(GetFindingsRequest request)
Lists and describes Security Hub-aggregated findings that are specified by filter attributes.
|
GetInsightResultsResult |
getInsightResults(GetInsightResultsRequest request)
Lists the results of the Security Hub insight specified by the insight ARN.
|
GetInsightsResult |
getInsights(GetInsightsRequest request)
Lists and describes insights that are specified by insight ARNs.
|
GetInvitationsCountResult |
getInvitationsCount(GetInvitationsCountRequest request)
Returns the count of all Security Hub membership invitations that were sent to the current member account, not
including the currently accepted invitation.
|
GetMasterAccountResult |
getMasterAccount(GetMasterAccountRequest request)
Provides the details for the Security Hub master account to the current member account.
|
GetMembersResult |
getMembers(GetMembersRequest request)
Returns the details on the Security Hub member accounts that are specified by the account IDs.
|
InviteMembersResult |
inviteMembers(InviteMembersRequest request)
Invites other AWS accounts to enable Security Hub and become Security Hub member accounts.
|
ListEnabledProductsForImportResult |
listEnabledProductsForImport(ListEnabledProductsForImportRequest request)
Lists all findings-generating solutions (products) whose findings you've subscribed to receive in Security Hub.
|
ListInvitationsResult |
listInvitations(ListInvitationsRequest request)
Lists all Security Hub membership invitations that were sent to the current AWS account.
|
ListMembersResult |
listMembers(ListMembersRequest request)
Lists details about all member accounts for the current Security Hub master account.
|
UpdateFindingsResult |
updateFindings(UpdateFindingsRequest request)
Updates the AWS Security Hub-aggregated findings specified by the filter attributes.
|
UpdateInsightResult |
updateInsight(UpdateInsightRequest request)
Updates the AWS Security Hub insight specified by the insight ARN.
|
addRequestHandler, addRequestHandler, configureRegion, getClientConfiguration, getEndpointPrefix, getMonitoringListeners, getRequestMetricsCollector, getServiceName, getSignerByURI, getSignerOverride, getSignerRegionOverride, getTimeOffset, makeImmutable, removeRequestHandler, removeRequestHandler, setEndpoint, setEndpoint, setRegion, setServiceNameIntern, setSignerRegionOverride, setTimeOffset, shutdown, withEndpoint, withRegion, withRegion, withTimeOffset
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
shutdown
public static AWSSecurityHubClientBuilder builder()
public AcceptInvitationResult acceptInvitation(AcceptInvitationRequest request)
Accepts the invitation to be monitored by a master SecurityHub account.
acceptInvitation
in interface AWSSecurityHub
acceptInvitationRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.public BatchDisableStandardsResult batchDisableStandards(BatchDisableStandardsRequest request)
Disables the standards specified by the standards subscription ARNs. In the context of Security Hub, supported standards (for example, CIS AWS Foundations) are automated and continuous checks that help determine your compliance status against security industry (including AWS) best practices.
batchDisableStandards
in interface AWSSecurityHub
batchDisableStandardsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public BatchEnableStandardsResult batchEnableStandards(BatchEnableStandardsRequest request)
Enables the standards specified by the standards ARNs. In the context of Security Hub, supported standards (for example, CIS AWS Foundations) are automated and continuous checks that help determine your compliance status against security industry (including AWS) best practices.
batchEnableStandards
in interface AWSSecurityHub
batchEnableStandardsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public BatchImportFindingsResult batchImportFindings(BatchImportFindingsRequest request)
Imports security findings that are generated by the integrated third-party products into Security Hub.
batchImportFindings
in interface AWSSecurityHub
batchImportFindingsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.public CreateInsightResult createInsight(CreateInsightRequest request)
Creates an insight, which is a consolidation of findings that identifies a security area that requires attention or intervention.
createInsight
in interface AWSSecurityHub
createInsightRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.ResourceConflictException
- The resource specified in the request conflicts with an existing resource.public CreateMembersResult createMembers(CreateMembersRequest request)
Creates member Security Hub accounts in the current AWS account (which becomes the master Security Hub account) that has Security Hub enabled.
createMembers
in interface AWSSecurityHub
createMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.ResourceConflictException
- The resource specified in the request conflicts with an existing resource.public DeclineInvitationsResult declineInvitations(DeclineInvitationsRequest request)
Declines invitations that are sent to this AWS account (invitee) by the AWS accounts (inviters) that are specified by the account IDs.
declineInvitations
in interface AWSSecurityHub
declineInvitationsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public DeleteInsightResult deleteInsight(DeleteInsightRequest request)
Deletes an insight that is specified by the insight ARN.
deleteInsight
in interface AWSSecurityHub
deleteInsightRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public DeleteInvitationsResult deleteInvitations(DeleteInvitationsRequest request)
Deletes invitations that are sent to this AWS account (invitee) by the AWS accounts (inviters) that are specified by their account IDs.
deleteInvitations
in interface AWSSecurityHub
deleteInvitationsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.public DeleteMembersResult deleteMembers(DeleteMembersRequest request)
Deletes the Security Hub member accounts that are specified by the account IDs.
deleteMembers
in interface AWSSecurityHub
deleteMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public DisableImportFindingsForProductResult disableImportFindingsForProduct(DisableImportFindingsForProductRequest request)
Cancels the subscription that allows a findings-generating solution (product) to import its findings into Security Hub.
disableImportFindingsForProduct
in interface AWSSecurityHub
disableImportFindingsForProductRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public DisableSecurityHubResult disableSecurityHub(DisableSecurityHubRequest request)
Disables the AWS Security Hub Service.
disableSecurityHub
in interface AWSSecurityHub
disableSecurityHubRequest
- InternalException
- Internal server error.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public DisassociateFromMasterAccountResult disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request)
Disassociates the current Security Hub member account from its master account.
disassociateFromMasterAccount
in interface AWSSecurityHub
disassociateFromMasterAccountRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public DisassociateMembersResult disassociateMembers(DisassociateMembersRequest request)
Disassociates the Security Hub member accounts that are specified by the account IDs from their master account.
disassociateMembers
in interface AWSSecurityHub
disassociateMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public EnableImportFindingsForProductResult enableImportFindingsForProduct(EnableImportFindingsForProductRequest request)
Sets up the subscription that enables a findings-generating solution (product) to import its findings into Security Hub.
enableImportFindingsForProduct
in interface AWSSecurityHub
enableImportFindingsForProductRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.ResourceConflictException
- The resource specified in the request conflicts with an existing resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public EnableSecurityHubResult enableSecurityHub(EnableSecurityHubRequest request)
Enables the AWS Security Hub service.
enableSecurityHub
in interface AWSSecurityHub
enableSecurityHubRequest
- InternalException
- Internal server error.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.ResourceConflictException
- The resource specified in the request conflicts with an existing resource.AccessDeniedException
- You do not have permission to to perform the action specified in the request.public GetEnabledStandardsResult getEnabledStandards(GetEnabledStandardsRequest request)
Lists and describes enabled standards.
getEnabledStandards
in interface AWSSecurityHub
getEnabledStandardsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public GetFindingsResult getFindings(GetFindingsRequest request)
Lists and describes Security Hub-aggregated findings that are specified by filter attributes.
getFindings
in interface AWSSecurityHub
getFindingsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public GetInsightResultsResult getInsightResults(GetInsightResultsRequest request)
Lists the results of the Security Hub insight specified by the insight ARN.
getInsightResults
in interface AWSSecurityHub
getInsightResultsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public GetInsightsResult getInsights(GetInsightsRequest request)
Lists and describes insights that are specified by insight ARNs.
getInsights
in interface AWSSecurityHub
getInsightsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public GetInvitationsCountResult getInvitationsCount(GetInvitationsCountRequest request)
Returns the count of all Security Hub membership invitations that were sent to the current member account, not including the currently accepted invitation.
getInvitationsCount
in interface AWSSecurityHub
getInvitationsCountRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public GetMasterAccountResult getMasterAccount(GetMasterAccountRequest request)
Provides the details for the Security Hub master account to the current member account.
getMasterAccount
in interface AWSSecurityHub
getMasterAccountRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public GetMembersResult getMembers(GetMembersRequest request)
Returns the details on the Security Hub member accounts that are specified by the account IDs.
getMembers
in interface AWSSecurityHub
getMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public InviteMembersResult inviteMembers(InviteMembersRequest request)
Invites other AWS accounts to enable Security Hub and become Security Hub member accounts. When an account accepts the invitation and becomes a member account, the master account can view Security Hub findings of the member account.
inviteMembers
in interface AWSSecurityHub
inviteMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public ListEnabledProductsForImportResult listEnabledProductsForImport(ListEnabledProductsForImportRequest request)
Lists all findings-generating solutions (products) whose findings you've subscribed to receive in Security Hub.
listEnabledProductsForImport
in interface AWSSecurityHub
listEnabledProductsForImportRequest
- InternalException
- Internal server error.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.public ListInvitationsResult listInvitations(ListInvitationsRequest request)
Lists all Security Hub membership invitations that were sent to the current AWS account.
listInvitations
in interface AWSSecurityHub
listInvitationsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public ListMembersResult listMembers(ListMembersRequest request)
Lists details about all member accounts for the current Security Hub master account.
listMembers
in interface AWSSecurityHub
listMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public UpdateFindingsResult updateFindings(UpdateFindingsRequest request)
Updates the AWS Security Hub-aggregated findings specified by the filter attributes.
updateFindings
in interface AWSSecurityHub
updateFindingsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public UpdateInsightResult updateInsight(UpdateInsightRequest request)
Updates the AWS Security Hub insight specified by the insight ARN.
updateInsight
in interface AWSSecurityHub
updateInsightRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException
- AWS Security Hub is not enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because the specified resource cannot be found.public ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)
Response metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing the request.
getCachedResponseMetadata
in interface AWSSecurityHub
request
- The originally executed requestCopyright © 2013 Amazon Web Services, Inc. All Rights Reserved.