Resource: awsInspectorAssessmentTemplate
Provides a Inspector assessment template
Example Usage
/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
new aws.inspectorAssessmentTemplate.InspectorAssessmentTemplate(
this,
"example",
{
duration: 3600,
eventSubscription: [
{
event: "ASSESSMENT_RUN_COMPLETED",
topicArn: "${aws_sns_topic.example.arn}",
},
],
name: "example",
rulesPackageArns: [
"arn:aws:inspector:us-west-2:758058086616:rulespackage/0-9hgA516p",
"arn:aws:inspector:us-west-2:758058086616:rulespackage/0-H5hpSawc",
"arn:aws:inspector:us-west-2:758058086616:rulespackage/0-JJOtZiqQ",
"arn:aws:inspector:us-west-2:758058086616:rulespackage/0-vg5GGHSD",
],
targetArn: "${aws_inspector_assessment_target.example.arn}",
}
);
Argument Reference
The following arguments are supported:
name
- (Required) The name of the assessment template.targetArn
- (Required) The assessment target ARN to attach the template to.duration
- (Required) The duration of the inspector run.rulesPackageArns
- (Required) The rules to be used during the run.eventSubscription
- (Optional) A block that enables sending notifications about a specified assessment template event to a designated SNS topic. See Event Subscriptions for details.tags
- (Optional) Key-value map of tags for the Inspector assessment template. If configured with a providerdefaultTags
configuration block present, tags with matching keys will overwrite those defined at the provider-level.
Event Subscriptions
The event subscription configuration block supports the following arguments:
event
- (Required) The event for which you want to receive SNS notifications. Valid values areASSESSMENT_RUN_STARTED
,ASSESSMENT_RUN_COMPLETED
,ASSESSMENT_RUN_STATE_CHANGED
, andFINDING_REPORTED
.topicArn
- (Required) The ARN of the SNS topic to which notifications are sent.
Attributes Reference
In addition to all arguments above, the following attributes are exported:
arn
- The template assessment ARN.tagsAll
- A map of tags assigned to the resource, including those inherited from the providerdefaultTags
configuration block.
Import
awsInspectorAssessmentTemplate
can be imported by using the template assessment ARN, e.g.,