AWS Security Hub

AWS Security Hub Security Hub Hubv2 API

The Security Hub Hubv2 API from AWS Security Hub — 2 operation(s) for security hub hubv2.

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 5

GET /hubv2 Describe Security Hub V2 #
DELETE /hubv2 Disable Security Hub V2 #
POST /hubv2 Enable Security Hub V2 #
DELETE /hubv2/feature/{FeatureName} Disable Security Hub Feature V2 #
POST /hubv2/feature/{FeatureName} Enable Security Hub Feature V2 #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/aws-security-hub/openapi/aws-security-hub-hubv2-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/aws-security-hub:aws-security-hub-hubv2-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

aws-security-hub-hubv2-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: AWS SecurityHub Hubv2 API
  version: '2018-10-26'
  description: Generated from AWS's published Smithy model for AWS SecurityHub. 5 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://securityhub.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
tags:
- name: Hubv2
paths:
  /hubv2:
    get:
      operationId: DescribeSecurityHubV2
      summary: Describe Security Hub V2
      description: Returns details about the service resource in your account.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DescribeSecurityHubV2Response'
        '500':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
        '429':
          description: ThrottlingException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThrottlingException'
        '400':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DescribeSecurityHubV2Request'
      tags:
      - Hubv2
    delete:
      operationId: DisableSecurityHubV2
      summary: Disable Security Hub V2
      description: Disable the service for the current Amazon Web Services Region or specified Amazon Web Services Region. Disabling the service also disables all opt-in features that are currently enabled in that Region.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DisableSecurityHubV2Response'
        '403':
          description: AccessDeniedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '500':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
        '429':
          description: ThrottlingException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThrottlingException'
        '400':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DisableSecurityHubV2Request'
      tags:
      - Hubv2
    post:
      operationId: EnableSecurityHubV2
      summary: Enable Security Hub V2
      description: Enables the service in account for the current Amazon Web Services Region or specified Amazon Web Services Region.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EnableSecurityHubV2Response'
        '403':
          description: AccessDeniedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '500':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
        '429':
          description: ThrottlingException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThrottlingException'
        '400':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/EnableSecurityHubV2Request'
      tags:
      - Hubv2
  /hubv2/feature/{FeatureName}:
    delete:
      operationId: DisableSecurityHubFeatureV2
      summary: Disable Security Hub Feature V2
      description: Disables an opt-in feature for the calling account in the current Amazon Web Services Region. The operation is idempotent. If the feature is already disabled, no changes are made. You cannot disable a feature that is managed by an organization policy.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DisableSecurityHubFeatureV2Response'
        '403':
          description: AccessDeniedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '500':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
        '429':
          description: ThrottlingException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThrottlingException'
        '400':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DisableSecurityHubFeatureV2Request'
      tags:
      - Hubv2
    post:
      operationId: EnableSecurityHubFeatureV2
      summary: Enable Security Hub Feature V2
      description: Enables an opt-in feature for the calling account in the current Amazon Web Services Region. The service must be enabled before you can enable a feature. The operation is idempotent. If the feature is already enabled, no changes are made. You cannot enable a feature that is managed by an organization policy.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EnableSecurityHubFeatureV2Response'
        '403':
          description: AccessDeniedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '500':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
        '429':
          description: ThrottlingException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ThrottlingException'
        '400':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/EnableSecurityHubFeatureV2Request'
      tags:
      - Hubv2
components:
  schemas:
    DisableSecurityHubV2Response:
      type: object
      properties: {}
    ValidationException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    DescribeSecurityHubV2Response:
      type: object
      properties:
        HubV2Arn:
          type: string
          description: The ARN of the service resource.
        SubscribedAt:
          type: string
          description: The date and time when the service was enabled in the account.
        Features:
          type: object
          additionalProperties:
            $ref: '#/components/schemas/FeatureDetail'
          description: A map of opt-in features and their current status and metadata for the account in the current Region.
    DescribeSecurityHubV2Request:
      type: object
      properties: {}
    DisableSecurityHubFeatureV2Response:
      type: object
      properties: {}
    DisableSecurityHubV2Request:
      type: object
      properties: {}
    ResourceNotFoundException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    EnableSecurityHubFeatureV2Response:
      type: object
      properties: {}
    DisableSecurityHubFeatureV2Request:
      type: object
      properties:
        FeatureName:
          type: string
          enum:
          - NETWORK_SCANNING
          description: The name of the feature to disable.
      required:
      - FeatureName
    AccessDeniedException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    InternalServerException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    FeatureDetail:
      type: object
      properties:
        FeatureStatus:
          type: string
          enum:
          - ENABLED
          - DISABLED
          description: 'The current enablement status of the feature. Valid values: ENABLED | DISABLED.'
        UpdatedAt:
          type: string
          format: date-time
          description: The date and time when the feature status was last updated.
    EnableSecurityHubV2Request:
      type: object
      properties:
        Tags:
          type: object
          additionalProperties:
            type: string
          description: The tags to add to the hub V2 resource when you enable Security Hub.
    EnableSecurityHubV2Response:
      type: object
      properties:
        HubV2Arn:
          type: string
          description: The ARN of the V2 resource that was created.
    ThrottlingException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    EnableSecurityHubFeatureV2Request:
      type: object
      properties:
        FeatureName:
          type: string
          enum:
          - NETWORK_SCANNING
          description: The name of the feature to enable.
      required:
      - FeatureName
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: securityhub
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/securityhub/service/2018-10-26/securityhub-2018-10-26.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)