---
type: resource-type
title: SecurityHubHub
description: aws resource type AWS::SecurityHub::Hub
name: SecurityHubHub
lexicon: aws
resource_type: AWS::SecurityHub::Hub
---
`AWS::SecurityHub::Hub`, a resource type of the aws lexicon.

## Properties

- `ARN` (`string`, optional): An ARN is automatically created for the customer.
- `AutoEnableControls` (`boolean`, optional): Whether to automatically enable new controls when they are added to standards that are enabled
- `ControlFindingGenerator` (`string`, optional): This field, used when enabling Security Hub, specifies whether the calling account has consolidated control findings turned on. If the value for this field is set to SECURITY_CONTROL, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards. If the value for this field is set to STANDARD_CONTROL, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards.
- `EnableDefaultStandards` (`boolean`, optional): Whether to enable the security standards that Security Hub has designated as automatically enabled.
- `SubscribedAt` (`string`, optional): The date and time when Security Hub was enabled in the account.
- `Tags` (`Record<string, unknown>`, optional)

## Attributes

- `ARN`
- `SubscribedAt`