Merge pull request #92 from andywick-aws/securityhub-updates

Security Hub solution updates

Author: andywick-aws

.flake8

@@ -17,7 +17,9 @@ select = A,B,B9,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z,0,1,2,3,4,5,6,7,
 ignore =
     FS003,  # f-string missing prefix (false positives with raw strings)
     T003,  # add link on issue into TODO
-    W503  # Line break occurred before binary operator
+    W503,  # Line break occurred before binary operator
+    E203,  # whitespace before ':'
+    TYP001  # guard import by `if False: # TYPE_CHECKING`
 
 # disable flake8 checks for Lambda function source code that will be used inline. (max 4096 characters)
 per-file-ignores =

CHANGELOG.md

@@ -3,6 +3,7 @@
 ## Table of Contents<!-- omit in toc -->
 
 - [Introduction](#introduction)
+- [2022-04-14](#2022-04-14)
 - [2022-04-10](#2022-04-10)
 - [2022-04-04](#2022-04-04)
 - [2022-03-29](#2022-03-29)
@@ -25,6 +26,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## 2022-04-14
+
+### Changed<!-- omit in toc -->
+
+- [Security Hub Organization](aws_sra_examples/solutions/securityhub/securityhub_org) updates:
+  - Use environment variables instead of an SSM parameter for configuration parameters.
+  - Batch SNS messages in groups of 10 instead of individual messages for each account.
+  - Removed boto3 from the requirements.txt to use the recently updated Lambda runtime default boto3.
+- Updated the .flake8 configuration to exclude E203 (whitespace before ':') and TYP001 (guard import by `if False: # TYPE_CHECKING`)
+
+### Fixed<!-- omit in toc -->
+
+- [Security Hub Organization](aws_sra_examples/solutions/securityhub/securityhub_org) fix for enabling the management account before adding it as a member in the delegated admin account configuration.
+
 ## 2022-04-10
 
 ### Added<!-- omit in toc -->