@ThreadSafe @Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class AWSSecurityHubClient extends AmazonWebServiceClient implements AWSSecurityHub
AWS Security Hub provides you with a comprehensive view of your security state within AWS and your compliance with the security industry standards and best practices. Security Hub collects security data from across AWS accounts, services, and supported third-party partners and helps you analyze your security trends and identify the highest priority security issues. For more information, see AWS Security Hub User Guide.
Currently, AWS Security Hub is in Preview release.
LOGGING_AWS_REQUEST_METRICENDPOINT_PREFIX| Modifier and Type | Method and Description |
|---|---|
AcceptInvitationResult |
acceptInvitation(AcceptInvitationRequest request)
Accepts the invitation to be monitored by a master SecurityHub account.
|
BatchDisableStandardsResult |
batchDisableStandards(BatchDisableStandardsRequest request)
Disables the standards specified by the standards subscription ARNs.
|
BatchEnableStandardsResult |
batchEnableStandards(BatchEnableStandardsRequest request)
Enables the standards specified by the standards ARNs.
|
BatchImportFindingsResult |
batchImportFindings(BatchImportFindingsRequest request)
Imports security findings that are generated by the integrated third-party products into Security Hub.
|
static AWSSecurityHubClientBuilder |
builder() |
CreateInsightResult |
createInsight(CreateInsightRequest request)
Creates an insight, which is a consolidation of findings that identifies a security area that requires attention
or intervention.
|
CreateMembersResult |
createMembers(CreateMembersRequest request)
Creates member Security Hub accounts in the current AWS account (which becomes the master Security Hub account)
that has Security Hub enabled.
|
DeclineInvitationsResult |
declineInvitations(DeclineInvitationsRequest request)
Declines invitations that are sent to this AWS account (invitee) by the AWS accounts (inviters) that are
specified by the account IDs.
|
DeleteInsightResult |
deleteInsight(DeleteInsightRequest request)
Deletes an insight that is specified by the insight ARN.
|
DeleteInvitationsResult |
deleteInvitations(DeleteInvitationsRequest request)
Deletes invitations that are sent to this AWS account (invitee) by the AWS accounts (inviters) that are specified
by their account IDs.
|
DeleteMembersResult |
deleteMembers(DeleteMembersRequest request)
Deletes the Security Hub member accounts that are specified by the account IDs.
|
DisableImportFindingsForProductResult |
disableImportFindingsForProduct(DisableImportFindingsForProductRequest request)
Cancels the subscription that allows a findings-generating solution (product) to import its findings into
Security Hub.
|
DisableSecurityHubResult |
disableSecurityHub(DisableSecurityHubRequest request)
Disables the AWS Security Hub Service.
|
DisassociateFromMasterAccountResult |
disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request)
Disassociates the current Security Hub member account from its master account.
|
DisassociateMembersResult |
disassociateMembers(DisassociateMembersRequest request)
Disassociates the Security Hub member accounts that are specified by the account IDs from their master account.
|
EnableImportFindingsForProductResult |
enableImportFindingsForProduct(EnableImportFindingsForProductRequest request)
Sets up the subscription that enables a findings-generating solution (product) to import its findings into
Security Hub.
|
EnableSecurityHubResult |
enableSecurityHub(EnableSecurityHubRequest request)
Enables the AWS Security Hub service.
|
ResponseMetadata |
getCachedResponseMetadata(AmazonWebServiceRequest request)
Returns additional metadata for a previously executed successful, request, typically used for debugging issues
where a service isn't acting as expected.
|
GetEnabledStandardsResult |
getEnabledStandards(GetEnabledStandardsRequest request)
Lists and describes enabled standards.
|
GetFindingsResult |
getFindings(GetFindingsRequest request)
Lists and describes Security Hub-aggregated findings that are specified by filter attributes.
|
GetInsightResultsResult |
getInsightResults(GetInsightResultsRequest request)
Lists the results of the Security Hub insight specified by the insight ARN.
|
GetInsightsResult |
getInsights(GetInsightsRequest request)
Lists and describes insights that are specified by insight ARNs.
|
GetInvitationsCountResult |
getInvitationsCount(GetInvitationsCountRequest request)
Returns the count of all Security Hub membership invitations that were sent to the current member account, not
including the currently accepted invitation.
|
GetMasterAccountResult |
getMasterAccount(GetMasterAccountRequest request)
Provides the details for the Security Hub master account to the current member account.
|
GetMembersResult |
getMembers(GetMembersRequest request)
Returns the details on the Security Hub member accounts that are specified by the account IDs.
|
InviteMembersResult |
inviteMembers(InviteMembersRequest request)
Invites other AWS accounts to enable Security Hub and become Security Hub member accounts.
|
ListEnabledProductsForImportResult |
listEnabledProductsForImport(ListEnabledProductsForImportRequest request)
Lists all findings-generating solutions (products) whose findings you've subscribed to receive in Security Hub.
|
ListInvitationsResult |
listInvitations(ListInvitationsRequest request)
Lists all Security Hub membership invitations that were sent to the current AWS account.
|
ListMembersResult |
listMembers(ListMembersRequest request)
Lists details about all member accounts for the current Security Hub master account.
|
UpdateFindingsResult |
updateFindings(UpdateFindingsRequest request)
Updates the AWS Security Hub-aggregated findings specified by the filter attributes.
|
UpdateInsightResult |
updateInsight(UpdateInsightRequest request)
Updates the AWS Security Hub insight specified by the insight ARN.
|
addRequestHandler, addRequestHandler, configureRegion, getClientConfiguration, getEndpointPrefix, getMonitoringListeners, getRequestMetricsCollector, getServiceName, getSignerByURI, getSignerOverride, getSignerRegionOverride, getTimeOffset, makeImmutable, removeRequestHandler, removeRequestHandler, setEndpoint, setEndpoint, setRegion, setServiceNameIntern, setSignerRegionOverride, setTimeOffset, shutdown, withEndpoint, withRegion, withRegion, withTimeOffsetequals, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitshutdownpublic static AWSSecurityHubClientBuilder builder()
public AcceptInvitationResult acceptInvitation(AcceptInvitationRequest request)
Accepts the invitation to be monitored by a master SecurityHub account.
acceptInvitation in interface AWSSecurityHubacceptInvitationRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.public BatchDisableStandardsResult batchDisableStandards(BatchDisableStandardsRequest request)
Disables the standards specified by the standards subscription ARNs. In the context of Security Hub, supported standards (for example, CIS AWS Foundations) are automated and continuous checks that help determine your compliance status against security industry (including AWS) best practices.
batchDisableStandards in interface AWSSecurityHubbatchDisableStandardsRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public BatchEnableStandardsResult batchEnableStandards(BatchEnableStandardsRequest request)
Enables the standards specified by the standards ARNs. In the context of Security Hub, supported standards (for example, CIS AWS Foundations) are automated and continuous checks that help determine your compliance status against security industry (including AWS) best practices.
batchEnableStandards in interface AWSSecurityHubbatchEnableStandardsRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public BatchImportFindingsResult batchImportFindings(BatchImportFindingsRequest request)
Imports security findings that are generated by the integrated third-party products into Security Hub.
batchImportFindings in interface AWSSecurityHubbatchImportFindingsRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.public CreateInsightResult createInsight(CreateInsightRequest request)
Creates an insight, which is a consolidation of findings that identifies a security area that requires attention or intervention.
createInsight in interface AWSSecurityHubcreateInsightRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.ResourceConflictException - The resource specified in the request conflicts with an existing resource.public CreateMembersResult createMembers(CreateMembersRequest request)
Creates member Security Hub accounts in the current AWS account (which becomes the master Security Hub account) that has Security Hub enabled.
createMembers in interface AWSSecurityHubcreateMembersRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.ResourceConflictException - The resource specified in the request conflicts with an existing resource.public DeclineInvitationsResult declineInvitations(DeclineInvitationsRequest request)
Declines invitations that are sent to this AWS account (invitee) by the AWS accounts (inviters) that are specified by the account IDs.
declineInvitations in interface AWSSecurityHubdeclineInvitationsRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public DeleteInsightResult deleteInsight(DeleteInsightRequest request)
Deletes an insight that is specified by the insight ARN.
deleteInsight in interface AWSSecurityHubdeleteInsightRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public DeleteInvitationsResult deleteInvitations(DeleteInvitationsRequest request)
Deletes invitations that are sent to this AWS account (invitee) by the AWS accounts (inviters) that are specified by their account IDs.
deleteInvitations in interface AWSSecurityHubdeleteInvitationsRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.public DeleteMembersResult deleteMembers(DeleteMembersRequest request)
Deletes the Security Hub member accounts that are specified by the account IDs.
deleteMembers in interface AWSSecurityHubdeleteMembersRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public DisableImportFindingsForProductResult disableImportFindingsForProduct(DisableImportFindingsForProductRequest request)
Cancels the subscription that allows a findings-generating solution (product) to import its findings into Security Hub.
disableImportFindingsForProduct in interface AWSSecurityHubdisableImportFindingsForProductRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public DisableSecurityHubResult disableSecurityHub(DisableSecurityHubRequest request)
Disables the AWS Security Hub Service.
disableSecurityHub in interface AWSSecurityHubdisableSecurityHubRequest - InternalException - Internal server error.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public DisassociateFromMasterAccountResult disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request)
Disassociates the current Security Hub member account from its master account.
disassociateFromMasterAccount in interface AWSSecurityHubdisassociateFromMasterAccountRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public DisassociateMembersResult disassociateMembers(DisassociateMembersRequest request)
Disassociates the Security Hub member accounts that are specified by the account IDs from their master account.
disassociateMembers in interface AWSSecurityHubdisassociateMembersRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public EnableImportFindingsForProductResult enableImportFindingsForProduct(EnableImportFindingsForProductRequest request)
Sets up the subscription that enables a findings-generating solution (product) to import its findings into Security Hub.
enableImportFindingsForProduct in interface AWSSecurityHubenableImportFindingsForProductRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.ResourceConflictException - The resource specified in the request conflicts with an existing resource.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public EnableSecurityHubResult enableSecurityHub(EnableSecurityHubRequest request)
Enables the AWS Security Hub service.
enableSecurityHub in interface AWSSecurityHubenableSecurityHubRequest - InternalException - Internal server error.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.ResourceConflictException - The resource specified in the request conflicts with an existing resource.AccessDeniedException - You do not have permission to to perform the action specified in the request.public GetEnabledStandardsResult getEnabledStandards(GetEnabledStandardsRequest request)
Lists and describes enabled standards.
getEnabledStandards in interface AWSSecurityHubgetEnabledStandardsRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public GetFindingsResult getFindings(GetFindingsRequest request)
Lists and describes Security Hub-aggregated findings that are specified by filter attributes.
getFindings in interface AWSSecurityHubgetFindingsRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public GetInsightResultsResult getInsightResults(GetInsightResultsRequest request)
Lists the results of the Security Hub insight specified by the insight ARN.
getInsightResults in interface AWSSecurityHubgetInsightResultsRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public GetInsightsResult getInsights(GetInsightsRequest request)
Lists and describes insights that are specified by insight ARNs.
getInsights in interface AWSSecurityHubgetInsightsRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public GetInvitationsCountResult getInvitationsCount(GetInvitationsCountRequest request)
Returns the count of all Security Hub membership invitations that were sent to the current member account, not including the currently accepted invitation.
getInvitationsCount in interface AWSSecurityHubgetInvitationsCountRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public GetMasterAccountResult getMasterAccount(GetMasterAccountRequest request)
Provides the details for the Security Hub master account to the current member account.
getMasterAccount in interface AWSSecurityHubgetMasterAccountRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public GetMembersResult getMembers(GetMembersRequest request)
Returns the details on the Security Hub member accounts that are specified by the account IDs.
getMembers in interface AWSSecurityHubgetMembersRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public InviteMembersResult inviteMembers(InviteMembersRequest request)
Invites other AWS accounts to enable Security Hub and become Security Hub member accounts. When an account accepts the invitation and becomes a member account, the master account can view Security Hub findings of the member account.
inviteMembers in interface AWSSecurityHubinviteMembersRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public ListEnabledProductsForImportResult listEnabledProductsForImport(ListEnabledProductsForImportRequest request)
Lists all findings-generating solutions (products) whose findings you've subscribed to receive in Security Hub.
listEnabledProductsForImport in interface AWSSecurityHublistEnabledProductsForImportRequest - InternalException - Internal server error.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.public ListInvitationsResult listInvitations(ListInvitationsRequest request)
Lists all Security Hub membership invitations that were sent to the current AWS account.
listInvitations in interface AWSSecurityHublistInvitationsRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public ListMembersResult listMembers(ListMembersRequest request)
Lists details about all member accounts for the current Security Hub master account.
listMembers in interface AWSSecurityHublistMembersRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.public UpdateFindingsResult updateFindings(UpdateFindingsRequest request)
Updates the AWS Security Hub-aggregated findings specified by the filter attributes.
updateFindings in interface AWSSecurityHubupdateFindingsRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public UpdateInsightResult updateInsight(UpdateInsightRequest request)
Updates the AWS Security Hub insight specified by the insight ARN.
updateInsight in interface AWSSecurityHubupdateInsightRequest - InternalException - Internal server error.InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.InvalidAccessException - AWS Security Hub is not enabled for the account used to make this request.LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException - The request was rejected because the specified resource cannot be found.public ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)
Response metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing the request.
getCachedResponseMetadata in interface AWSSecurityHubrequest - The originally executed requestCopyright © 2013 Amazon Web Services, Inc. All Rights Reserved.