---
type: resource-type
title: PolicyAssociation
description: aws resource type AWS::SecurityHub::PolicyAssociation
name: PolicyAssociation
lexicon: aws
resource_type: AWS::SecurityHub::PolicyAssociation
---
`AWS::SecurityHub::PolicyAssociation`, a resource type of the aws lexicon.

## Properties

- `ConfigurationPolicyId` (`string`, required): The universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration
- `TargetId` (`string`, required): The identifier of the target account, organizational unit, or the root
- `TargetType` (`"ACCOUNT" | "ORGANIZATIONAL_UNIT" | "ROOT"`, required): Indicates whether the target is an AWS account, organizational unit, or the organization root
- `AssociationIdentifier` (`string`, optional): A unique identifier to indicates if the target has an association
- `AssociationStatus` (`"FAILED" | "PENDING" | "SUCCESS"`, optional): The current status of the association between the specified target and the configuration
- `AssociationStatusMessage` (`string`, optional): An explanation for a FAILED value for AssociationStatus
- `AssociationType` (`"APPLIED" | "INHERITED"`, optional): Indicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent
- `UpdatedAt` (`string`, optional): The date and time, in UTC and ISO 8601 format, that the configuration policy association was last updated

## Attributes

- `AssociationIdentifier`
- `AssociationStatus`
- `AssociationStatusMessage`
- `AssociationType`
- `UpdatedAt`