Can you add custom Security Stadards or edit existing Standards?

Question

I don't see this mentioned in the documentation and I do not see any options in the console, so I thought I would double check here to ensure I am not missing anything:  
  
1. Can you create your own Security Standard that has a set of rules that you'd like your accounts to comply with?  
  
2. Can you customize existing Security Standards?  For example, before enabling the CIS Benchmark, can I disable all Level 2 controls?  Or is the only way to do this to enable the standard and then disable individual controls afterwards?  
  
Perhaps using another tool that can integrate with Security Hub, such as Prowler, is the way to go for a custom Security Standard?  
  
Thank you

Answer

Fully customizable standards are coming in the future. Today, you can disable individual controls in a standard. This can only be done after you have enabled the standard.   
  
Relevant docs:  
  
https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-enable-disable-controls.html  
  
https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-cis-to-disable.html

Answer

Thank you, Ely.  That is great to hear about fully customizable standards coming in the future.  Also, thank you for confirming that we can only enable standards and then disable individual rules.  That is what I thought.

Can you add custom Security Stadards or edit existing Standards?

Relevant questions

I don't see the instances and I don't see anything AWSAccount1 created in my AWS account.

Can you add custom Security Stadards or edit existing Standards?

Where can I see custom metadata or tags in WorkDocs?

How do I see commit history for a specific file in codecommit?

I don't see Simple Mail Transfer Protocol (SMTP) settings container

Why I can not see MY Jack in the EmotionFX?

How can I format a decimal (DOUBLE) number in a select statement?

How can I see the remaining time when resizing Redshift cluster?

Can not add MFA or add users I see an error page flashing

How do I see the posts I am following?