1. Registry
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. securityhub
  6. HubV2

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.79.0
published on Monday, Sep 14, 2026 by Pulumi
aws-native logo aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.79.0
published on Monday, Sep 14, 2026 by Pulumi

    The AWS::SecurityHub::HubV2 resource represents the implementation of the AWS Security Hub V2 service in your account. Only one hubv2 resource can created in each region in which you enable Security Hub V2.

    Create HubV2 Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new HubV2(name: string, args?: HubV2Args, opts?: CustomResourceOptions);
    @overload
    def HubV2(resource_name: str,
              args: Optional[HubV2Args] = None,
              opts: Optional[ResourceOptions] = None)
    
    @overload
    def HubV2(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              network_scanning: Optional[HubV2NetworkScanningArgs] = None,
              tags: Optional[Mapping[str, str]] = None)
    func NewHubV2(ctx *Context, name string, args *HubV2Args, opts ...ResourceOption) (*HubV2, error)
    public HubV2(string name, HubV2Args? args = null, CustomResourceOptions? opts = null)
    public HubV2(String name, HubV2Args args)
    public HubV2(String name, HubV2Args args, CustomResourceOptions options)
    
    type: aws-native:securityhub:HubV2
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "aws-native_securityhub_hub_v2" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args HubV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args HubV2Args
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args HubV2Args
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args HubV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args HubV2Args
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    HubV2 Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The HubV2 resource accepts the following input properties:

    NetworkScanning Pulumi.AwsNative.SecurityHub.Inputs.HubV2NetworkScanning
    Tags Dictionary<string, string>
    The tags to add to the hub V2 resource when you enable Security Hub CSPM.
    NetworkScanning HubV2NetworkScanningArgs
    Tags map[string]string
    The tags to add to the hub V2 resource when you enable Security Hub CSPM.
    network_scanning object
    tags map(string)
    The tags to add to the hub V2 resource when you enable Security Hub CSPM.
    networkScanning HubV2NetworkScanning
    tags Map<String,String>
    The tags to add to the hub V2 resource when you enable Security Hub CSPM.
    networkScanning HubV2NetworkScanning
    tags {[key: string]: string}
    The tags to add to the hub V2 resource when you enable Security Hub CSPM.
    network_scanning HubV2NetworkScanningArgs
    tags Mapping[str, str]
    The tags to add to the hub V2 resource when you enable Security Hub CSPM.
    networkScanning Property Map
    tags Map<String>
    The tags to add to the hub V2 resource when you enable Security Hub CSPM.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the HubV2 resource produces the following output properties:

    HubV2Arn string
    The Amazon Resource Name of the Security Hub V2 resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    SubscribedAt string
    The date and time when the service was enabled in the account.
    HubV2Arn string
    The Amazon Resource Name of the Security Hub V2 resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    SubscribedAt string
    The date and time when the service was enabled in the account.
    hub_v2_arn string
    The Amazon Resource Name of the Security Hub V2 resource.
    id string
    The provider-assigned unique ID for this managed resource.
    subscribed_at string
    The date and time when the service was enabled in the account.
    hubV2Arn String
    The Amazon Resource Name of the Security Hub V2 resource.
    id String
    The provider-assigned unique ID for this managed resource.
    subscribedAt String
    The date and time when the service was enabled in the account.
    hubV2Arn string
    The Amazon Resource Name of the Security Hub V2 resource.
    id string
    The provider-assigned unique ID for this managed resource.
    subscribedAt string
    The date and time when the service was enabled in the account.
    hub_v2_arn str
    The Amazon Resource Name of the Security Hub V2 resource.
    id str
    The provider-assigned unique ID for this managed resource.
    subscribed_at str
    The date and time when the service was enabled in the account.
    hubV2Arn String
    The Amazon Resource Name of the Security Hub V2 resource.
    id String
    The provider-assigned unique ID for this managed resource.
    subscribedAt String
    The date and time when the service was enabled in the account.

    Supporting Types

    HubV2NetworkScanning, HubV2NetworkScanningArgs

    Configuration for the Network Scanning opt-in feature of Security Hub V2. Network Scanning is available in the AWS commercial partition only; specifying this property in another partition, such as AWS GovCloud (US) or China, fails. This property is desired state: if you remove it from a stack that previously set it, the feature is disabled. If a stack has never set it, the feature is left as-is, so a stack that does not manage Network Scanning will not disable it. Network Scanning requires Security Hub V2 to be enabled in the same account and Region.
    Status Pulumi.AwsNative.SecurityHub.HubV2NetworkScanningStatus
    Whether the Network Scanning feature is enabled for this account and Region.
    Status HubV2NetworkScanningStatus
    Whether the Network Scanning feature is enabled for this account and Region.
    status "ENABLED" | "DISABLED"
    Whether the Network Scanning feature is enabled for this account and Region.
    status HubV2NetworkScanningStatus
    Whether the Network Scanning feature is enabled for this account and Region.
    status HubV2NetworkScanningStatus
    Whether the Network Scanning feature is enabled for this account and Region.
    status HubV2NetworkScanningStatus
    Whether the Network Scanning feature is enabled for this account and Region.
    status "ENABLED" | "DISABLED"
    Whether the Network Scanning feature is enabled for this account and Region.

    HubV2NetworkScanningStatus, HubV2NetworkScanningStatusArgs

    Enabled
    ENABLED
    Disabled
    DISABLED
    HubV2NetworkScanningStatusEnabled
    ENABLED
    HubV2NetworkScanningStatusDisabled
    DISABLED
    "ENABLED"
    ENABLED
    "DISABLED"
    DISABLED
    Enabled
    ENABLED
    Disabled
    DISABLED
    Enabled
    ENABLED
    Disabled
    DISABLED
    ENABLED
    ENABLED
    DISABLED
    DISABLED
    "ENABLED"
    ENABLED
    "DISABLED"
    DISABLED

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.79.0
    published on Monday, Sep 14, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial