@Generated(value="com.amazonaws:aws-java-sdk-code-generator") public interface AWSSecurityHub
Note: Do not directly implement this interface, new methods are added to it regularly. Extend from
AbstractAWSSecurityHub
instead.
AWS Security Hub provides you with a comprehensive view of your security state in AWS and your compliance with the security industry standards and best practices. Security Hub collects security data from across AWS accounts, services, and supported third-party partners and helps you analyze your security trends and identify the highest priority security issues. For more information, see AWS Security Hub User Guide.
Important: AWS Security Hub is currently in Preview release.
Modifier and Type | Field and Description |
---|---|
static String |
ENDPOINT_PREFIX
The region metadata service name for computing region endpoints.
|
Modifier and Type | Method and Description |
---|---|
AcceptInvitationResult |
acceptInvitation(AcceptInvitationRequest acceptInvitationRequest)
Accepts the invitation to be monitored by a Security Hub master account.
|
BatchDisableStandardsResult |
batchDisableStandards(BatchDisableStandardsRequest batchDisableStandardsRequest)
Disables the standards specified by the standards subscription ARNs.
|
BatchEnableStandardsResult |
batchEnableStandards(BatchEnableStandardsRequest batchEnableStandardsRequest)
Enables the standards specified by the standards ARNs.
|
BatchImportFindingsResult |
batchImportFindings(BatchImportFindingsRequest batchImportFindingsRequest)
Imports security findings generated from an integrated third-party product into Security Hub.
|
CreateInsightResult |
createInsight(CreateInsightRequest createInsightRequest)
Creates an insight, which is a consolidation of findings that identifies a security area that requires attention
or intervention.
|
CreateMembersResult |
createMembers(CreateMembersRequest createMembersRequest)
Creates Security Hub member accounts associated with the account used for this action, which becomes the Security
Hub Master account.
|
DeclineInvitationsResult |
declineInvitations(DeclineInvitationsRequest declineInvitationsRequest)
Declines invitations that are sent to this AWS account (invitee) from the AWS accounts (inviters) that are
specified by the provided
AccountIds . |
DeleteInsightResult |
deleteInsight(DeleteInsightRequest deleteInsightRequest)
Deletes the insight specified by the
InsightArn . |
DeleteInvitationsResult |
deleteInvitations(DeleteInvitationsRequest deleteInvitationsRequest)
Deletes invitations that were sent to theis AWS account (invitee) by the AWS accounts (inviters) that are
specified by their account IDs.
|
DeleteMembersResult |
deleteMembers(DeleteMembersRequest deleteMembersRequest)
Deletes the Security Hub member accounts that the account IDs specify.
|
DescribeProductsResult |
describeProducts(DescribeProductsRequest describeProductsRequest)
Returns information about the products available that you can subscribe to.
|
DisableImportFindingsForProductResult |
disableImportFindingsForProduct(DisableImportFindingsForProductRequest disableImportFindingsForProductRequest)
Cancels the subscription that allows a findings-generating solution (product) to import its findings into
Security Hub.
|
DisableSecurityHubResult |
disableSecurityHub(DisableSecurityHubRequest disableSecurityHubRequest)
Disables the Security Hub service.
|
DisassociateFromMasterAccountResult |
disassociateFromMasterAccount(DisassociateFromMasterAccountRequest disassociateFromMasterAccountRequest)
Disassociates the current Security Hub member account from its master account.
|
DisassociateMembersResult |
disassociateMembers(DisassociateMembersRequest disassociateMembersRequest)
Disassociates the Security Hub member accounts that are specified by the account IDs from their master account.
|
EnableImportFindingsForProductResult |
enableImportFindingsForProduct(EnableImportFindingsForProductRequest enableImportFindingsForProductRequest)
Sets up the subscription that enables a findings-generating solution (product) to import its findings into
Security Hub.
|
EnableSecurityHubResult |
enableSecurityHub(EnableSecurityHubRequest enableSecurityHubRequest)
Enables the Security Hub service.
|
ResponseMetadata |
getCachedResponseMetadata(AmazonWebServiceRequest request)
Returns additional metadata for a previously executed successful request, typically used for debugging issues
where a service isn't acting as expected.
|
GetEnabledStandardsResult |
getEnabledStandards(GetEnabledStandardsRequest getEnabledStandardsRequest)
Lists and describes enabled standards.
|
GetFindingsResult |
getFindings(GetFindingsRequest getFindingsRequest)
Lists and describes Security Hub-aggregated findings that filter attributes specify.
|
GetInsightResultsResult |
getInsightResults(GetInsightResultsRequest getInsightResultsRequest)
Lists the results of the Security Hub insight that the insight ARN specifies.
|
GetInsightsResult |
getInsights(GetInsightsRequest getInsightsRequest)
Lists and describes insights that insight ARNs specify.
|
GetInvitationsCountResult |
getInvitationsCount(GetInvitationsCountRequest getInvitationsCountRequest)
Returns the count of all Security Hub membership invitations that were sent to the current member account, not
including the currently accepted invitation.
|
GetMasterAccountResult |
getMasterAccount(GetMasterAccountRequest getMasterAccountRequest)
Provides the details for the Security Hub master account to the current member account.
|
GetMembersResult |
getMembers(GetMembersRequest getMembersRequest)
Returns the details on the Security Hub member accounts that the account IDs specify.
|
InviteMembersResult |
inviteMembers(InviteMembersRequest inviteMembersRequest)
Invites other AWS accounts to enable Security Hub and become Security Hub member accounts.
|
ListEnabledProductsForImportResult |
listEnabledProductsForImport(ListEnabledProductsForImportRequest listEnabledProductsForImportRequest)
Lists all findings-generating solutions (products) whose findings you have subscribed to receive in Security Hub.
|
ListInvitationsResult |
listInvitations(ListInvitationsRequest listInvitationsRequest)
Lists all Security Hub membership invitations that were sent to the current AWS account.
|
ListMembersResult |
listMembers(ListMembersRequest listMembersRequest)
Lists details about all member accounts for the current Security Hub master account.
|
ListProductSubscribersResult |
listProductSubscribers(ListProductSubscribersRequest listProductSubscribersRequest)
Returns a list of account IDs that are subscribed to the product.
|
void |
shutdown()
Shuts down this client object, releasing any resources that might be held open.
|
UpdateFindingsResult |
updateFindings(UpdateFindingsRequest updateFindingsRequest)
Updates the
Note and RecordState of the Security Hub-aggregated findings that the
filter attributes specify. |
UpdateInsightResult |
updateInsight(UpdateInsightRequest updateInsightRequest)
Updates the Security Hub insight that the insight ARN specifies.
|
static final String ENDPOINT_PREFIX
AcceptInvitationResult acceptInvitation(AcceptInvitationRequest acceptInvitationRequest)
Accepts the invitation to be monitored by a Security Hub master account.
acceptInvitationRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.BatchDisableStandardsResult batchDisableStandards(BatchDisableStandardsRequest batchDisableStandardsRequest)
Disables the standards specified by the standards subscription ARNs. In the context of Security Hub, supported standards (for example, CIS AWS Foundations) are automated and continuous checks that help determine your compliance status against security industry (including AWS) best practices.
batchDisableStandardsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.BatchEnableStandardsResult batchEnableStandards(BatchEnableStandardsRequest batchEnableStandardsRequest)
Enables the standards specified by the standards ARNs. In the context of Security Hub, supported standards (for example, CIS AWS Foundations) are automated and continuous checks that help determine your compliance status against security industry (including AWS) best practices.
batchEnableStandardsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.BatchImportFindingsResult batchImportFindings(BatchImportFindingsRequest batchImportFindingsRequest)
Imports security findings generated from an integrated third-party product into Security Hub.
batchImportFindingsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.CreateInsightResult createInsight(CreateInsightRequest createInsightRequest)
Creates an insight, which is a consolidation of findings that identifies a security area that requires attention or intervention.
createInsightRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.ResourceConflictException
- The resource specified in the request conflicts with an existing resource.CreateMembersResult createMembers(CreateMembersRequest createMembersRequest)
Creates Security Hub member accounts associated with the account used for this action, which becomes the Security Hub Master account. Security Hub must be enabled in the account used to make this request.
createMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.ResourceConflictException
- The resource specified in the request conflicts with an existing resource.DeclineInvitationsResult declineInvitations(DeclineInvitationsRequest declineInvitationsRequest)
Declines invitations that are sent to this AWS account (invitee) from the AWS accounts (inviters) that are
specified by the provided AccountIds
.
declineInvitationsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.DeleteInsightResult deleteInsight(DeleteInsightRequest deleteInsightRequest)
Deletes the insight specified by the InsightArn
.
deleteInsightRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.DeleteInvitationsResult deleteInvitations(DeleteInvitationsRequest deleteInvitationsRequest)
Deletes invitations that were sent to theis AWS account (invitee) by the AWS accounts (inviters) that are specified by their account IDs.
deleteInvitationsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.DeleteMembersResult deleteMembers(DeleteMembersRequest deleteMembersRequest)
Deletes the Security Hub member accounts that the account IDs specify.
deleteMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.DescribeProductsResult describeProducts(DescribeProductsRequest describeProductsRequest)
Returns information about the products available that you can subscribe to.
describeProductsRequest
- InternalException
- Internal server error.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.DisableImportFindingsForProductResult disableImportFindingsForProduct(DisableImportFindingsForProductRequest disableImportFindingsForProductRequest)
Cancels the subscription that allows a findings-generating solution (product) to import its findings into Security Hub.
disableImportFindingsForProductRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.DisableSecurityHubResult disableSecurityHub(DisableSecurityHubRequest disableSecurityHubRequest)
Disables the Security Hub service.
disableSecurityHubRequest
- InternalException
- Internal server error.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.DisassociateFromMasterAccountResult disassociateFromMasterAccount(DisassociateFromMasterAccountRequest disassociateFromMasterAccountRequest)
Disassociates the current Security Hub member account from its master account.
disassociateFromMasterAccountRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.DisassociateMembersResult disassociateMembers(DisassociateMembersRequest disassociateMembersRequest)
Disassociates the Security Hub member accounts that are specified by the account IDs from their master account.
disassociateMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.EnableImportFindingsForProductResult enableImportFindingsForProduct(EnableImportFindingsForProductRequest enableImportFindingsForProductRequest)
Sets up the subscription that enables a findings-generating solution (product) to import its findings into Security Hub.
enableImportFindingsForProductRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.ResourceConflictException
- The resource specified in the request conflicts with an existing resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.EnableSecurityHubResult enableSecurityHub(EnableSecurityHubRequest enableSecurityHubRequest)
Enables the Security Hub service.
enableSecurityHubRequest
- InternalException
- Internal server error.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.ResourceConflictException
- The resource specified in the request conflicts with an existing resource.AccessDeniedException
- You don't have permission to perform the action specified in the request.GetEnabledStandardsResult getEnabledStandards(GetEnabledStandardsRequest getEnabledStandardsRequest)
Lists and describes enabled standards.
getEnabledStandardsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.GetFindingsResult getFindings(GetFindingsRequest getFindingsRequest)
Lists and describes Security Hub-aggregated findings that filter attributes specify.
getFindingsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.GetInsightResultsResult getInsightResults(GetInsightResultsRequest getInsightResultsRequest)
Lists the results of the Security Hub insight that the insight ARN specifies.
getInsightResultsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.GetInsightsResult getInsights(GetInsightsRequest getInsightsRequest)
Lists and describes insights that insight ARNs specify.
getInsightsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.GetInvitationsCountResult getInvitationsCount(GetInvitationsCountRequest getInvitationsCountRequest)
Returns the count of all Security Hub membership invitations that were sent to the current member account, not including the currently accepted invitation.
getInvitationsCountRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.GetMasterAccountResult getMasterAccount(GetMasterAccountRequest getMasterAccountRequest)
Provides the details for the Security Hub master account to the current member account.
getMasterAccountRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.GetMembersResult getMembers(GetMembersRequest getMembersRequest)
Returns the details on the Security Hub member accounts that the account IDs specify.
getMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.InviteMembersResult inviteMembers(InviteMembersRequest inviteMembersRequest)
Invites other AWS accounts to enable Security Hub and become Security Hub member accounts. When an account accepts the invitation and becomes a member account, the master account can view Security Hub findings of the member account.
inviteMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.ListEnabledProductsForImportResult listEnabledProductsForImport(ListEnabledProductsForImportRequest listEnabledProductsForImportRequest)
Lists all findings-generating solutions (products) whose findings you have subscribed to receive in Security Hub.
listEnabledProductsForImportRequest
- InternalException
- Internal server error.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.ListInvitationsResult listInvitations(ListInvitationsRequest listInvitationsRequest)
Lists all Security Hub membership invitations that were sent to the current AWS account.
listInvitationsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ListMembersResult listMembers(ListMembersRequest listMembersRequest)
Lists details about all member accounts for the current Security Hub master account.
listMembersRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ListProductSubscribersResult listProductSubscribers(ListProductSubscribersRequest listProductSubscribersRequest)
Returns a list of account IDs that are subscribed to the product.
listProductSubscribersRequest
- ResourceNotFoundException
- The request was rejected because we can't find the specified resource.InternalException
- Internal server error.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.UpdateFindingsResult updateFindings(UpdateFindingsRequest updateFindingsRequest)
Updates the Note
and RecordState
of the Security Hub-aggregated findings that the
filter attributes specify. Any member account that can view the finding also sees the update to the finding.
updateFindingsRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.UpdateInsightResult updateInsight(UpdateInsightRequest updateInsightRequest)
Updates the Security Hub insight that the insight ARN specifies.
updateInsightRequest
- InternalException
- Internal server error.InvalidInputException
- The request was rejected because you supplied an invalid or out-of-range value for an input parameter.InvalidAccessException
- AWS Security Hub isn't enabled for the account used to make this request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error code describes the limit exceeded.ResourceNotFoundException
- The request was rejected because we can't find the specified resource.void shutdown()
ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)
Response metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing a request.
request
- The originally executed request.Copyright © 2013 Amazon Web Services, Inc. All Rights Reserved.