feat: enable CIS benchmark v1.4.0 standard (#308)

nozaq · web-flow · commit bb724cd7783a · 2022-12-03T09:56:19.000+09:00
diff --git a/modules/securityhub-baseline/main.tf b/modules/securityhub-baseline/main.tf
@@ -43,7 +43,7 @@ resource "aws_securityhub_invite_accepter" "invitee" {
 resource "aws_securityhub_standards_subscription" "cis" {
   count = var.enable_cis_standard ? 1 : 0
 
-  standards_arn = "arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0"
+  standards_arn = "arn:aws:securityhub:${data.aws_region.current.name}::standards/cis-aws-foundations-benchmark/v/1.4.0"
 
   depends_on = [aws_securityhub_account.main]
 }

Original file line number	Diff line number	Diff line change
`@@ -43,7 +43,7 @@ resource "aws_securityhub_invite_accepter" "invitee" {`
`43`	`43`	`resource "aws_securityhub_standards_subscription" "cis" {`
`44`	`44`	`count = var.enable_cis_standard ? 1 : 0`
`45`	`45`
`46`		`- standards_arn = "arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0"`
	`46`	`+ standards_arn = "arn:aws:securityhub:${data.aws_region.current.name}::standards/cis-aws-foundations-benchmark/v/1.4.0"`
`47`	`47`
`48`	`48`	`depends_on = [aws_securityhub_account.main]`
`49`	`49`	`}`