Describe Hub
securityhub.describe_hub
ActionAmazon Web Servicesconnection required
Calls the AWS securityhub API (SigV4).
Returns details about the Hub resource in your account, including the HubArn and the time when you enabled Security Hub CSPM.
Connection
- Required
- Yes — the node will not save without one
- Auth type
- API key
- Providers
- AWS SecurityHub
- Secret shape
- {"access_key_id", "secret_access_key"}
- Config it needs
- region
- Resolved by
- config.connection_id, else node.connection_id
Configuration
2 fields, none required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.
| Field | Type | Required | Default | Constraints | Example |
|---|---|---|---|---|---|
region AWS region (overrides the connection). | string | No | — | — | — |
hub_arn The ARN of the Hub resource to retrieve. | string | No | — | — | — |
Output
One shape.
result
| Field | Type | Example |
|---|---|---|
HubArn | string | — |
SubscribedAt | string | — |
AutoEnableControls | boolean | — |
ControlFindingGenerator | string | — |
{
"AutoEnableControls": false,
"ControlFindingGenerator": "",
"HubArn": "",
"SubscribedAt": ""
}Related AWS SecurityHub nodes
See Describe Hub run in a workflow.
In a technical demo we add the AWS SecurityHub connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.