SecurityHub#
Client#
- class SecurityHub.Client#
A low-level client representing AWS SecurityHub
Security Hub provides you with a comprehensive view of the security state of your Amazon Web Services environment and resources. It also provides you with the readiness status of your environment based on controls from supported security standards. Security Hub collects security data from Amazon Web Services accounts, services, and integrated third-party products and helps you analyze security trends in your environment to identify the highest priority security issues. For more information about Security Hub, see the Security HubUser Guide.
When you use operations in the Security Hub API, the requests are executed only in the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change that results from the operation is applied only to that Region. To make the same change in other Regions, run the same command for each Region in which you want to apply the change.
For example, if your Region is set to
us-west-2, when you useCreateMembersto add a member account to Security Hub, the association of the member account with the administrator account is created only in theus-west-2Region. Security Hub must be enabled for the member account in the same Region that the invitation was sent from.The following throttling limits apply to using Security Hub API operations.
BatchEnableStandards-RateLimitof 1 request per second.BurstLimitof 1 request per second.GetFindings-RateLimitof 3 requests per second.BurstLimitof 6 requests per second.BatchImportFindings-RateLimitof 10 requests per second.BurstLimitof 30 requests per second.BatchUpdateFindings-RateLimitof 10 requests per second.BurstLimitof 30 requests per second.UpdateStandardsControl-RateLimitof 1 request per second.BurstLimitof 5 requests per second.All other operations -
RateLimitof 10 requests per second.BurstLimitof 30 requests per second.
import boto3 client = boto3.client('securityhub')
These are the available methods:
- accept_administrator_invitation
- accept_invitation
- batch_disable_standards
- batch_enable_standards
- batch_get_security_controls
- batch_get_standards_control_associations
- batch_import_findings
- batch_update_findings
- batch_update_standards_control_associations
- can_paginate
- close
- create_action_target
- create_finding_aggregator
- create_insight
- create_members
- decline_invitations
- delete_action_target
- delete_finding_aggregator
- delete_insight
- delete_invitations
- delete_members
- describe_action_targets
- describe_hub
- describe_organization_configuration
- describe_products
- describe_standards
- describe_standards_controls
- disable_import_findings_for_product
- disable_organization_admin_account
- disable_security_hub
- disassociate_from_administrator_account
- disassociate_from_master_account
- disassociate_members
- enable_import_findings_for_product
- enable_organization_admin_account
- enable_security_hub
- get_administrator_account
- get_enabled_standards
- get_finding_aggregator
- get_finding_history
- get_findings
- get_insight_results
- get_insights
- get_invitations_count
- get_master_account
- get_members
- get_paginator
- get_waiter
- invite_members
- list_enabled_products_for_import
- list_finding_aggregators
- list_invitations
- list_members
- list_organization_admin_accounts
- list_security_control_definitions
- list_standards_control_associations
- list_tags_for_resource
- tag_resource
- untag_resource
- update_action_target
- update_finding_aggregator
- update_findings
- update_insight
- update_organization_configuration
- update_security_hub_configuration
- update_standards_control
Paginators#
Paginators are available on a client instance via the get_paginator method. For more detailed instructions and examples on the usage of paginators, see the paginators user guide.
The available paginators are:
- DescribeActionTargets
- DescribeProducts
- DescribeStandards
- DescribeStandardsControls
- GetEnabledStandards
- GetFindingHistory
- GetFindings
- GetInsights
- ListEnabledProductsForImport
- ListFindingAggregators
- ListInvitations
- ListMembers
- ListOrganizationAdminAccounts
- ListSecurityControlDefinitions
- ListStandardsControlAssociations