本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。 # 的操作、资源和条件键 AWS Security Hub AWS Security Hub（服务前缀:`securityhub`）提供以下特定于服务的资源、操作和条件上下文密钥，供在 IAM 权限策略中使用。 参考： + 了解如何[配置该服务](https://docs.aws.amazon.com/securityhub/latest/userguide/)。 + 查看[适用于该服务的 API 操作列表](https://docs.aws.amazon.com/securityhub/1.0/APIReference/)。 + 了解如何[使用 IAM](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html) 权限策略保护该服务及其资源。 **Topics** + [操作定义为 AWS Security Hub](#awssecurityhub-actions-as-permissions) + [由定义的资源类型 AWS Security Hub](#awssecurityhub-resources-for-iam-policies) + [的条件密钥 AWS Security Hub](#awssecurityhub-policy-keys) ## 操作定义为 AWS Security Hub 您可以在 IAM 策略语句的 `Action` 元素中指定以下操作。可以使用策略授予在 AWS中执行操作的权限。您在策略中使用一项操作时，通常使用相同的名称允许或拒绝对 API 操作或 CLI 命令的访问。但在某些情况下，单一动作可控制对多项操作的访问。还有某些操作需要多种不同的动作。 操作表的**访问级别**列描述如何对操作进行分类（列出、读取、权限管理或标记）。此分类可以帮助您了解当您在策略中使用操作时，相应操作授予的访问级别。有关访问级别的更多信息，请参阅[策略摘要中的访问级别](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_understand-policy-summary-access-level-summaries.html)。 操作表的**资源类型**列指示每项操作是否支持资源级权限。如果该列没有任何值，您必须在策略语句的 `Resource` 元素中指定策略应用的所有资源（“\*”）。通过在 IAM policy 中使用条件来筛选访问权限，以控制是否可以在资源或请求中使用特定标签键。如果操作具有一个或多个必需资源，则调用方必须具有使用这些资源来使用该操作的权限。必需资源在表中以星号 (\*) 表示。如果您在 IAM policy 中使用 `Resource` 元素限制资源访问权限，则必须为每种必需的资源类型添加 ARN 或模式。某些操作支持多种资源类型。如果资源类型是可选的（未指示为必需），则可以选择使用一种可选资源类型。 操作表的**条件键**列包括可以在策略语句的 `Condition` 元素中指定的键。有关与服务资源关联的条件键的更多信息，请参阅资源类型表的**条件键**列。 操作表的**依赖操作**列显示成功调用操作可能需要的其他权限。除了操作本身的权限以外，可能还需要这些权限。若某个操作指定依赖操作，则这些依赖关系可能适用于为该操作定义的其他资源，而不仅仅是表中列出的第一个资源。 **注意** 资源条件键在[资源类型](#awssecurityhub-resources-for-iam-policies)表中列出。您可以在操作表的**资源类型（\* 为必需）**列中找到应用于某项操作的资源类型的链接。资源类型表中的资源类型包括**条件密钥**列，这是应用于操作表中操作的资源条件键。 有关下表中各列的详细信息，请参阅[操作表](reference_policies_actions-resources-contextkeys.html#actions_table)。 **** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_AcceptAdministratorInvitation.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_AcceptAdministratorInvitation.html) ** - **描述:** 授予权限以接受成为成员账户的 Security Hub 邀请 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_AcceptInvitation.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_AcceptInvitation.html) ** - **描述:** 授予权限以接受成为成员账户的 Security Hub 邀请 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_AllowVendedLogDeliveryForResource.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_AllowVendedLogDeliveryForResource.html) [仅权限]** - **描述:** 授予记录资源传送的权限 - **访问级别:** 权限管理 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) / **条件键:** / **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) ** - **描述:** 授予权限以删除 Security Hub 中的一个或多个自动化规则 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-automation-rule](#awssecurityhub-automation-rule) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchDisableStandards.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchDisableStandards.html) ** - **描述:** 授予权限以在 Security Hub 中禁用标准 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchEnableStandards.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchEnableStandards.html) ** - **描述:** 授予权限以在 Security Hub 中启用标准 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) ** - **描述:** 授予权限以基于规则 Amazon 资源名称（ARN）从 Security Hub 检索自动化规则的详情列表 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-automation-rule](#awssecurityhub-automation-rule) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchGetConfigurationPolicyAssociations.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchGetConfigurationPolicyAssociations.html) ** - **描述:** 授予检索与调用账户所在组织的特定成员账户列表和组织单位关联的配置策略信息的权限 - **访问级别:** 读取 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/latest/userguide/iam-permissions-controls-standards.html](https://docs.aws.amazon.com/securityhub/latest/userguide/iam-permissions-controls-standards.html) [仅权限]** - **描述:** 授予权限以获取控件的启用和合规性状态、控件的调查发现计数以及 Security Hub 控制台上控件的总体安全性评分 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchGetSecurityControls.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchGetSecurityControls.html) ** - **描述:** 授予权限以获取通过 ID 或 ARN 标识的特定安全控件的详细信息 - **访问级别:** 读取 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** securityhub:DescribeStandardsControls - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchGetStandardsControlAssociations.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchGetStandardsControlAssociations.html) ** - **描述:** 授予权限以获取标准中一批安全控件的启用状态 - **访问级别:** 读取 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** securityhub:DescribeStandardsControls - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchImportFindings.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchImportFindings.html) ** - **描述:** 授予权限以将结果从集成产品导入 Security Hub - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-product](#awssecurityhub-product) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** / **条件键:** [#awssecurityhub-securityhub_TargetAccount](#awssecurityhub-securityhub_TargetAccount) / **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) ** - **描述:** 授予权限以根据规则 Amazon 资源名称（ARN）和输入参数从 Security Hub 更新一个或多个自动化规则 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-automation-rule](#awssecurityhub-automation-rule) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateFindingsV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateFindingsV2.html) ** - **描述:** 授予权限以更新一组选定的 Security Hub 结果的客户控制字段 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** / **条件键:** [#awssecurityhub-securityhub_ASFFSyntaxPath___ASFFSyntaxPath_](#awssecurityhub-securityhub_ASFFSyntaxPath___ASFFSyntaxPath_)
[#awssecurityhub-securityhub_OCSFSyntaxPath___OCSFSyntaxPath_](#awssecurityhub-securityhub_OCSFSyntaxPath___OCSFSyntaxPath_) / **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateStandardsControlAssociations.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateStandardsControlAssociations.html) ** - **描述:** 授予权限以更新标准中一批安全控件的启用状态 - **访问级别:** 写入 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** securityhub:UpdateStandardsControl - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ConnectorRegistrationsV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ConnectorRegistrationsV2.html) ** - **描述:** 授予权限以基于输入参数完成 OAuth 2.0 授权代码流 - **访问级别:** 写入 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateActionTarget.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateActionTarget.html) ** - **描述:** 授予权限以在 Security Hub 中创建自定义操作 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateAggregatorV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateAggregatorV2.html) ** - **描述:** 授予权限以创建 aggregatorV2，这将配置跨区域数据聚合 - **访问级别:** 写入 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) ** - **描述:** 授予权限以基于输入参数创建自动化规则 - **访问级别:** 写入 - **资源类型（\* 为必需）:** - **条件键:** [#awssecurityhub-aws_RequestTag___TagKey_](#awssecurityhub-aws_RequestTag___TagKey_)
[#awssecurityhub-aws_TagKeys](#awssecurityhub-aws_TagKeys) - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) ** - **描述:** 授予权限以基于输入参数创建自动化规则 V2 - **访问级别:** 写入 - **资源类型（\* 为必需）:** - **条件键:** [#awssecurityhub-aws_RequestTag___TagKey_](#awssecurityhub-aws_RequestTag___TagKey_)
[#awssecurityhub-aws_TagKeys](#awssecurityhub-aws_TagKeys) - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateConfigurationPolicy.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateConfigurationPolicy.html) ** - **描述:** 授予在 Security Hub 中创建配置策略以管理组织成员设置的权限 - **访问级别:** 写入 - **资源类型（\* 为必需）:** - **条件键:** [#awssecurityhub-aws_RequestTag___TagKey_](#awssecurityhub-aws_RequestTag___TagKey_)
[#awssecurityhub-aws_TagKeys](#awssecurityhub-aws_TagKeys) - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateConnectorV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateConnectorV2.html) ** - **描述:** 授予权限以基于输入参数创建连接器 V2 - **访问级别:** 写入 - **资源类型（\* 为必需）:** - **条件键:** [#awssecurityhub-aws_RequestTag___TagKey_](#awssecurityhub-aws_RequestTag___TagKey_)
[#awssecurityhub-aws_TagKeys](#awssecurityhub-aws_TagKeys) - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateFindingAggregator.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateFindingAggregator.html) ** - **描述:** 授予权限以创建结果聚合器，其中包含跨区域结果聚合配置 - **访问级别:** 写入 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateInsight.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateInsight.html) ** - **描述:** 授予权限以在 Security Hub 中创建洞察。洞察是相关结果的集合 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateMembers.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateMembers.html) ** - **描述:** 授予权限以在 Security Hub 中创建成员账户 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateTicketV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateTicketV2.html) ** - **描述:** 授予权限以为选定的 OCSF 调查发现创建票证 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-connectorv2](#awssecurityhub-connectorv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeclineInvitations.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeclineInvitations.html) ** - **描述:** 授予权限以拒绝成为成员账户的 Security Hub 邀请 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteActionTarget.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteActionTarget.html) ** - **描述:** 授予权限以删除 Security Hub 中的自定义操作 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteAggregatorV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteAggregatorV2.html) ** - **描述:** 授予权限以删除 aggregatorV2，这将配置跨区域数据聚合 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-aggregatorv2](#awssecurityhub-aggregatorv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) ** - **描述:** 授予权限以删除 Security Hub 中的自动化规则 V2 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-automation-rulev2](#awssecurityhub-automation-rulev2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteConfigurationPolicy.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteConfigurationPolicy.html) ** - **描述:** 授予删除现有配置策略的权限 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-configuration-policy](#awssecurityhub-configuration-policy) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteConnectorV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteConnectorV2.html) ** - **描述:** 授予权限以删除 Security Hub 中的连接器 V2 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-connectorv2](#awssecurityhub-connectorv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteFindingAggregator.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteFindingAggregator.html) ** - **描述:** 授予权限以删除结果聚合器，这将禁用跨区域结果聚合 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-finding-aggregator](#awssecurityhub-finding-aggregator) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteInsight.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteInsight.html) ** - **描述:** 授予权限以从 Security Hub 中删除洞察 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteInvitations.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteInvitations.html) ** - **描述:** 授予权限以删除成为成员账户的 Security Hub 邀请 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteMembers.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteMembers.html) ** - **描述:** 授予权限以删除 Security Hub 成员账户 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeActionTargets.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeActionTargets.html) ** - **描述:** 授予权限以使用 API 检索自定义操作列表 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeHub.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeHub.html) ** - **描述:** 授予权限以检索有关您的账户中的 Hub 资源的信息 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeOrganizationConfiguration.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeOrganizationConfiguration.html) ** - **描述:** 授予描述 Security Hub 组织配置的权限 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeProducts.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeProducts.html) ** - **描述:** 授予权限以检索有关可用 Security Hub 产品集成的信息 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeProductsV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeProductsV2.html) ** - **描述:** 授予权限以检索有关可用 Security Hub V2 产品集成的信息 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeSecurityHubV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeSecurityHubV2.html) ** - **描述:** 授予权限以检索有关您的账户中的 Hub V2 资源的信息 - **访问级别:** 读取 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) ** - **描述:** 授予权限以检索有关 Security Hub 标准的信息 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandardsControls.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandardsControls.html) ** - **描述:** 授予权限以检索有关 Security Hub 标准控件的信息 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableImportFindingsForProduct.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableImportFindingsForProduct.html) ** - **描述:** 授予权限以禁用 Security Hub 集成产品的结果导入 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableOrganizationAdminAccount.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableOrganizationAdminAccount.html) ** - **描述:** 授予删除组织的 Security Hub 管理员帐户的权限 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** organizations:DeregisterDelegatedAdministrator
organizations:DescribeOrganization
organizations:ListDelegatedAdministrators - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableSecurityHub.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableSecurityHub.html) ** - **描述:** 授予权限以禁用 Security Hub - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableSecurityHubV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableSecurityHubV2.html) ** - **描述:** 授予权限以禁用 Security Hub V2 - **访问级别:** 写入 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisassociateFromAdministratorAccount.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisassociateFromAdministratorAccount.html) ** - **描述:** 授予 Security Hub 成员账户从关联的管理员账户中取消关联的权限 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisassociateFromMasterAccount.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisassociateFromMasterAccount.html) ** - **描述:** 授予对 Security Hub 成员账户的权限以从关联的主账户中取消关联 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisassociateMembers.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisassociateMembers.html) ** - **描述:** 授予从关联的管理员账户中取消关联 Security Hub 成员账户的权限 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableImportFindingsForProduct.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableImportFindingsForProduct.html) ** - **描述:** 授予权限以启用 Security Hub 集成产品的结果导入 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableOrganizationAdminAccount.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableOrganizationAdminAccount.html) ** - **描述:** 授予指定组织的 Security Hub 管理员帐户的权限 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** organizations:DescribeOrganization
organizations:EnableAWSServiceAccess
organizations:ListAWSServiceAccessForOrganization
organizations:ListDelegatedAdministrators
organizations:RegisterDelegatedAdministrator - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableSecurityHub.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableSecurityHub.html) ** - **描述:** 授予权限以启用 Security Hub - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** / **条件键:** [#awssecurityhub-aws_RequestTag___TagKey_](#awssecurityhub-aws_RequestTag___TagKey_)
[#awssecurityhub-aws_TagKeys](#awssecurityhub-aws_TagKeys) / **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableSecurityHubV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableSecurityHubV2.html) ** - **描述:** 授予权限以启用 Security Hub V2 - **访问级别:** 写入 - **资源类型（\* 为必需）:** - **条件键:** [#awssecurityhub-aws_RequestTag___TagKey_](#awssecurityhub-aws_RequestTag___TagKey_)
[#awssecurityhub-aws_TagKeys](#awssecurityhub-aws_TagKeys) - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GenerateRecommendedPolicyV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GenerateRecommendedPolicyV2.html) ** - **描述:** 授予针对OCSF调查结果生成政策建议的权限 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingStatisticsV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingStatisticsV2.html) [仅权限]** - **描述:** 授予权限以检索有关调查发现的聚合统计数据 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) / **条件键:** / **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetAdministratorAccount.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetAdministratorAccount.html) ** - **描述:** 授予权限以检索有关 Security Hub 管理员账户的详细信息 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetAggregatorV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetAggregatorV2.html) ** - **描述:** 授予权限以检索 aggregatorV2 的详细信息，这将配置跨区域数据聚合 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-aggregatorv2](#awssecurityhub-aggregatorv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) ** - **描述:** 授予权限以基于规则 Amazon 资源名称（ARN）从 Security Hub 检索自动化规则 V2 的详细信息 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-automation-rulev2](#awssecurityhub-automation-rulev2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetConfigurationPolicy.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetConfigurationPolicy.html) ** - **描述:** 授予获取调用账户所创建一项配置策略的完整概览的权限 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-configuration-policy](#awssecurityhub-configuration-policy) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetConfigurationPolicyAssociation.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetConfigurationPolicyAssociation.html) ** - **描述:** 授予检索与调用账户所在组织的某个成员账户或组织单位关联的某个配置策略信息的权限 - **访问级别:** 读取 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetConnectorV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetConnectorV2.html) ** - **描述:** 授予权限以基于连接器 ID 从 Security Hub 检索连接器 V2 的详细信息 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-connectorv2](#awssecurityhub-connectorv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetControlFindingSummary.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetControlFindingSummary.html) [仅权限]** - **描述:** 授予检索安全评分以及安全标准状态的调查结果计数和控件状态的权限 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetEnabledStandards.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetEnabledStandards.html) ** - **描述:** 授予权限以检索在 Security Hub 中启用的标准列表 - **访问级别:** 列表 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingAggregator.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingAggregator.html) ** - **描述:** 授予权限以检索结果聚合器的详细信息，这将配置跨区域结果聚合 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-finding-aggregator](#awssecurityhub-finding-aggregator) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingHistory.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingHistory.html) ** - **描述:** 授予权限以从 Security Hub 检索调查发现历史记录的列表 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingsV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingsV2.html) ** - **描述:** 授予权限以从 Security Hub 检索结果的列表 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) / **条件键:** / **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingsTrendsV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingsTrendsV2.html) ** - **描述:** 授予检索调查结果趋势的权限 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFreeTrialEndDate.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFreeTrialEndDate.html) [仅权限]** - **描述:** 授予权限以检索账户免费试用 Security Hub 的结束日期 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFreeTrialUsage.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFreeTrialUsage.html) [仅权限]** - **描述:** 授予权限以检索免费试用期内 Security Hub 使用情况的信息 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInsightFindingTrend.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInsightFindingTrend.html) [仅权限]** - **描述:** 授予权限以从 Security Hub 检索洞察发现趋势，从而生成图表 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInsightResults.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInsightResults.html) ** - **描述:** 授予权限以从 Security Hub 检索洞察结果 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInsights.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInsights.html) ** - **描述:** 授予权限以检索 Security Hub 洞察 - **访问级别:** List - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInvitationsCount.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInvitationsCount.html) ** - **描述:** 授予权限以检索发送到账户的 Security Hub 成员资格邀请的计数 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetMasterAccount.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetMasterAccount.html) ** - **描述:** 授予权限以检索有关 Security Hub 主账户的详细信息 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetMembers.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetMembers.html) ** - **描述:** 授予权限以检索 Security Hub 成员账户的详细信息 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetRecommendedPolicyV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetRecommendedPolicyV2.html) ** - **描述:** 授予检索 OCSF 调查结果的政策建议的权限 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetResourcesStatisticsV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetResourcesStatisticsV2.html) ** - **描述:** 授予权限以检索有关资源的聚合统计数据 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetResourcesTrendsV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetResourcesTrendsV2.html) ** - **描述:** 授予检索资源趋势的权限 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetResourcesV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetResourcesV2.html) ** - **描述:** 授予权限以检索资源的列表 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetSecurityControlDefinition.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetSecurityControlDefinition.html) ** - **描述:** 授予获取用 ID 标识的特定安全控件详细信息的权限 - **访问级别:** 读取 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** securityhub:DescribeStandardsControls - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetUsage.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetUsage.html) [仅权限]** - **描述:** 授予权限以按账户检索有关 Security Hub 使用情况的信息 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetUsageV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetUsageV2.html) [仅权限]** - **描述:** 授予权限以检索有关账户的 Security Hub 使用情况的信息 - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_InviteMembers.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_InviteMembers.html) ** - **描述:** 授予邀请其他 AWS 账户成为 Security Hub 成员账户的权限 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListAccountUsageV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListAccountUsageV2.html) [仅权限]** - **描述:** 授予检索组织中账户的 Security Hub 使用情况列表的权限 - **访问级别:** 列表 - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListAggregatorsV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListAggregatorsV2.html) ** - **描述:** 授予权限以检索 aggregatorsV2 的列表，这将配置跨区域数据聚合 - **访问级别:** 列表 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) ** - **描述:** 授予权限以从 Security Hub 检索呼叫账户的自动化规则列表及其元数据 - **访问级别:** 列表 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) ** - **描述:** 授予权限以从 Security Hub 检索调用账户的自动化规则 V2 及其元数据的列表 - **访问级别:** 列表 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListConfigurationPolicies.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListConfigurationPolicies.html) ** - **描述:** 授予列出调用账户所创建所有配置策略的摘要的权限 - **访问级别:** 列表 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListConfigurationPolicyAssociations.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListConfigurationPolicyAssociations.html) ** - **描述:** 授予检索与调用账户所在组织的所有成员账户和组织单位关联的所有配置策略信息的权限 - **访问级别:** 列表 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListConnectorsV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListConnectorsV2.html) ** - **描述:** 授予权限以从 Security Hub 检索调用账户的连接器 V2 及其元数据的列表 - **访问级别:** 列表 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListControlEvaluationSummaries.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListControlEvaluationSummaries.html) [仅权限]** - **描述:** 授予检索标准控件列表的权限，包括控件 ID、状态和调查结果计数 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListEnabledProductsForImport.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListEnabledProductsForImport.html) ** - **描述:** 授予权限以检索当前启用的 Security Hub 集成产品 - **访问级别:** 列表 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListFindingAggregators.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListFindingAggregators.html) ** - **描述:** 授予权限以检索结果聚合器的列表，其中包含跨区域结果聚合配置 - **访问级别:** 列表 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListInvitations.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListInvitations.html) ** - **描述:** 授予权限以检索发送到账户的 Security Hub 邀请 - **访问级别:** List - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListMembers.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListMembers.html) ** - **描述:** 授予权限以检索与管理员账户关联的 Security Hub 成员账户的详细信息 - **访问级别:** List - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListOrganizationAdminAccounts.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListOrganizationAdminAccounts.html) ** - **描述:** 授予列出组织的 Security Hub 管理员帐户的权限 - **访问级别:** 列表 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** organizations:DescribeOrganization
organizations:ListDelegatedAdministrators - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListSecurityControlDefinitions.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListSecurityControlDefinitions.html) ** - **描述:** 授予权限以检索安全控件定义列表，其中包含当前区域中安全控件的详细信息 - **访问级别:** 列表 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListStandardsControlAssociations.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListStandardsControlAssociations.html) ** - **描述:** 授予权限以列出标准中安全控件的启用状态 - **访问级别:** 列表 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** securityhub:DescribeStandardsControls - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListTagsForResource.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListTagsForResource.html) ** - **描述:** 授予权限以列出与资源关联的标签 - **访问级别:** Read - **资源类型（\* 为必需）:** [#awssecurityhub-automation-rule](#awssecurityhub-automation-rule) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-configuration-policy](#awssecurityhub-configuration-policy) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) / **条件键:** / **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_SendFindingEvents.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_SendFindingEvents.html) [仅权限]** - **描述:** 授予使用自定义操作向亚马逊发送 Security Hub 调查结果的权限 EventBridge - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_SendInsightEvents.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_SendInsightEvents.html) [仅权限]** - **描述:** 授予使用自定义操作向亚马逊发送 Security Hub 见解的权限 EventBridge - **访问级别:** 读取 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_StartConfigurationPolicyAssociation.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_StartConfigurationPolicyAssociation.html) ** - **描述:** 授予将某个配置策略关联到调用账户所在组织的某个成员账户或组织单位的权限 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_StartConfigurationPolicyDisassociation.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_StartConfigurationPolicyDisassociation.html) ** - **描述:** 授予从调用账户所在组织的某个成员账户或组织单位移除某个配置策略的权限 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_TagResource.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_TagResource.html) ** - **描述:** 授予权限以将标签添加到 Security Hub 资源 - **访问级别:** Tagging - **资源类型（\* 为必需）:** [#awssecurityhub-aggregatorv2](#awssecurityhub-aggregatorv2) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-automation-rule](#awssecurityhub-automation-rule) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-automation-rulev2](#awssecurityhub-automation-rulev2) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-configuration-policy](#awssecurityhub-configuration-policy) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-connectorv2](#awssecurityhub-connectorv2) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) / **条件键:** / **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UntagResource.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UntagResource.html) ** - **描述:** 授予权限以从 Security Hub 资源中删除标签 - **访问级别:** Tagging - **资源类型（\* 为必需）:** [#awssecurityhub-aggregatorv2](#awssecurityhub-aggregatorv2) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-automation-rule](#awssecurityhub-automation-rule) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-automation-rulev2](#awssecurityhub-automation-rulev2) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-configuration-policy](#awssecurityhub-configuration-policy) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-connectorv2](#awssecurityhub-connectorv2) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) / **条件键:** / **相关操作:** - **资源类型（\* 为必需）:** [#awssecurityhub-hubv2](#awssecurityhub-hubv2) / **条件键:** / **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateActionTarget.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateActionTarget.html) ** - **描述:** 授予权限以在 Security Hub 中更新自定义操作 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateAggregatorV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateAggregatorV2.html) ** - **描述:** 授予权限以更新 aggregatorV2，这将配置跨区域数据聚合 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-aggregatorv2](#awssecurityhub-aggregatorv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) ** - **描述:** 授予权限以基于规则 Amazon 资源名称（ARN）和输入参数在 Security Hub 中更新自动化规则 V2 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-automation-rulev2](#awssecurityhub-automation-rulev2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateConfigurationPolicy.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateConfigurationPolicy.html) ** - **描述:** 授予更新现有配置策略的权限 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-configuration-policy](#awssecurityhub-configuration-policy) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateConnectorV2.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateConnectorV2.html) ** - **描述:** 授予权限以基于连接器 ID 和输入参数在 Security Hub 中更新连接器 V2 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-connectorv2](#awssecurityhub-connectorv2) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateFindingAggregator.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateFindingAggregator.html) ** - **描述:** 授予权限以更新结果聚合器，其中包含跨区域结果聚合配置 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-finding-aggregator](#awssecurityhub-finding-aggregator) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateFindings.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateFindings.html) ** - **描述:** 授予权限以更新 Security Hub 结果 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateInsight.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateInsight.html) ** - **描述:** 授予权限以在 Security Hub 中更新洞察 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateOrganizationConfiguration.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateOrganizationConfiguration.html) ** - **描述:** 授予更新 Security Hub 组织配置的权限 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityControl.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityControl.html) ** - **描述:** 授予更新用 ID 或 ARN 标识的特定安全控件的属性的权限 - **访问级别:** 写入 - **资源类型（\* 为必需）:** - **条件键:** - **相关操作:** securityhub:UpdateStandardsControl - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html) ** - **描述:** 授予权限以更新 Security Hub 配置 - **访问级别:** Write - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** - ** [https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateStandardsControl.html](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateStandardsControl.html) ** - **描述:** 授予权限以更新 Security Hub 标准控件 - **访问级别:** 写入 - **资源类型（\* 为必需）:** [#awssecurityhub-hub](#awssecurityhub-hub) - **条件键:** - **相关操作:** ## 由定义的资源类型 AWS Security Hub 以下资源类型是由该服务定义的，可以在 IAM 权限策略语句的 `Resource` 元素中使用这些资源类型。[操作表](#awssecurityhub-actions-as-permissions)中的每个操作指定了可以使用该操作指定的资源类型。您也可以在策略中包含条件键，从而定义资源类型。这些键显示在资源类型表的最后一列。有关下表中各列的详细信息，请参阅[资源类型表](reference_policies_actions-resources-contextkeys.html#resources_table)。 **** | 资源类型 | ARN | 条件键 | | --- | --- | --- | | [https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources) | arn:${Partition}:securityhub:${Region}:${Account}:hub/default | [#awssecurityhub-aws_ResourceTag___TagKey_](#awssecurityhub-aws_ResourceTag___TagKey_) | | [https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources) | arn:${Partition}:securityhub:${Region}:${Account}:hubv2/${HubV2Id} | [#awssecurityhub-aws_ResourceTag___TagKey_](#awssecurityhub-aws_ResourceTag___TagKey_) | | [https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources) | arn:${Partition}:securityhub:${Region}:${Account}:product/${Company}/${ProductId} | | | [https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources) | arn:${Partition}:securityhub:${Region}:${Account}:finding-aggregator/${FindingAggregatorId} | | | [https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources) | arn:${Partition}:securityhub:${Region}:${Account}:aggregatorv2/${AggregatorV2Id} | [#awssecurityhub-aws_ResourceTag___TagKey_](#awssecurityhub-aws_ResourceTag___TagKey_) | | [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) | arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/${AutomationRuleId} | [#awssecurityhub-aws_ResourceTag___TagKey_](#awssecurityhub-aws_ResourceTag___TagKey_) | | [https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules) | arn:${Partition}:securityhub:${Region}:${Account}:automation-rulev2/${AutomationRuleV2Id} | [#awssecurityhub-aws_ResourceTag___TagKey_](#awssecurityhub-aws_ResourceTag___TagKey_) | | [https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) | arn:${Partition}:securityhub:${Region}:${Account}:configuration-policy/${ConfigurationPolicyId} | [#awssecurityhub-aws_ResourceTag___TagKey_](#awssecurityhub-aws_ResourceTag___TagKey_) | | [https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources) | arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/${ConnectorV2Id} | [#awssecurityhub-aws_ResourceTag___TagKey_](#awssecurityhub-aws_ResourceTag___TagKey_) | ## 的条件密钥 AWS Security Hub AWS Security Hub 定义了以下可以在 IAM 策略`Condition`元素中使用的条件键。您可以使用这些键进一步细化应用策略语句的条件。有关下表中各列的详细信息，请参阅[条件键表](reference_policies_actions-resources-contextkeys.html#context_keys_table)。 要查看适用于所有服务的全局条件键，请参阅 [AWS 全局条件上下文键](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html)。 **** | 条件键 | 描述 | Type | | --- | --- | --- | | [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag) | 根据在请求中是否具有标签键值对来按照操作筛选访问权限 | 字符串 | | [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag) | 根据附加到资源的标签键值对来按操作筛选访问权限 | 字符串 | | [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys) | 根据在请求中是否具有标签键来按操作筛选访问权限 | ArrayOfString | | [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-asffsyntaxpath](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-asffsyntaxpath) | 根据请求中的指定字段和值筛选访问权限 | 字符串 | | [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-ocsfsyntaxpath](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-ocsfsyntaxpath) | 根据请求中的指定字段和值筛选访问权限 | 字符串 | | [https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#conditions](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#conditions) | 按请求中指定的 AwsAccountId 字段筛选访问权限 | 字符串 |