Skip to main content

policy_associations_list_only

Lists policy_associations in a region or regions, for all properties use policy_associations

Overview

Namepolicy_associations_list_only
TypeResource
DescriptionThe AWS::SecurityHub::PolicyAssociation resource represents the AWS Security Hub Central Configuration Policy associations in your Target. Only the AWS Security Hub delegated administrator can create the resouce from the home region.
Idaws.securityhub.policy_associations_list_only

Fields

NameDatatypeDescription
configuration_policy_idstringThe universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration
association_statusstringThe current status of the association between the specified target and the configuration
association_typestringIndicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent
association_status_messagestringAn explanation for a FAILED value for AssociationStatus
target_idstringThe identifier of the target account, organizational unit, or the root
target_typestringIndicates whether the target is an AWS account, organizational unit, or the organization root
updated_atstringThe date and time, in UTC and ISO 8601 format, that the configuration policy association was last updated
association_identifierstringA unique identifier to indicates if the target has an association
regionstringAWS region.

Methods

NameAccessible byRequired Params
list_resourcesSELECTregion

SELECT examples

Lists all policy_associations in a region.

SELECT
region,
association_identifier
FROM aws.securityhub.policy_associations_list_only
WHERE region = 'us-east-1';

Permissions

For permissions required to operate on the policy_associations_list_only resource, see policy_associations