Batch Update Standards Control Associations

securityhub_batch_update_standards_control_associations

R Documentation

For a batch of security controls and standards, this operation updates the enablement status of a control in a standard¶

Description¶

For a batch of security controls and standards, this operation updates the enablement status of a control in a standard.

Usage¶

securityhub_batch_update_standards_control_associations(
  StandardsControlAssociationUpdates)

Arguments¶

StandardsControlAssociationUpdates: [required] Updates the enablement status of a security control in a specified standard.

Value¶

A list with the following syntax:

list(
  UnprocessedAssociationUpdates = list(
    list(
      StandardsControlAssociationUpdate = list(
        StandardsArn = "string",
        SecurityControlId = "string",
        AssociationStatus = "ENABLED"|"DISABLED",
        UpdatedReason = "string"
      ),
      ErrorCode = "INVALID_INPUT"|"ACCESS_DENIED"|"NOT_FOUND"|"LIMIT_EXCEEDED",
      ErrorReason = "string"
    )
  )
)

Request syntax¶

svc$batch_update_standards_control_associations(
  StandardsControlAssociationUpdates = list(
    list(
      StandardsArn = "string",
      SecurityControlId = "string",
      AssociationStatus = "ENABLED"|"DISABLED",
      UpdatedReason = "string"
    )
  )
)

Examples¶

## Not run: 
# The following example disables CloudWatch.12 in CIS AWS Foundations
# Benchmark v1.2.0. The example returns an error for CloudTrail.1 because
# an invalid standard ARN is provided.
svc$batch_update_standards_control_associations(
  StandardsControlAssociationUpdates = list(
    list(
      AssociationStatus = "DISABLED",
      SecurityControlId = "CloudTrail.1",
      StandardsArn = "arn:aws:securityhub:::ruleset/sample-standard/v/1.1.0",
      UpdatedReason = "Not relevant to environment"
    ),
    list(
      AssociationStatus = "DISABLED",
      SecurityControlId = "CloudWatch.12",
      StandardsArn = "arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0",
      UpdatedReason = "Not relevant to environment"
    )
  )
)

## End(Not run)