AWS Security Hub mindmap

AWS Security Hub

Central place to see and act on security findings across accounts

• Security Hub: The new unified cloud security solution that turns signals into prioritized exposures
  • Unified view: Correlates signals from GuardDuty, Inspector, Macie and posture checks
  • Exposure findings: Highlights resources that combine vulnerabilities, misconfigurations and reachability
  • Attack paths: Graph of how an attacker could reach and control resources in an exposure
  • Prioritization: Groups exposures by title and severity with remediation guidance
  • Unused access findings: IAM roles, users, access keys and permissions not used in 90 days
  • Trends and coverage: Up to one year of history plus a view of where security services are missing
  • OCSF format: Findings follow the Open Cybersecurity Schema Framework
• Security Hub CSPM: Cloud security posture management (the original Security Hub)
  • Standards: AWS Foundational Security Best Practices, CIS, NIST and PCI DSS
  • Controls: Automated checks that run through AWS Config rules
  • Security score: Calculated from the results of the security checks
  • AWS Config required: Config records the resources that controls evaluate
  • 30-day free trial: For the first time an account enables Security Hub CSPM
• Integrations: Sources and destinations of findings
  • Amazon GuardDuty: Threat findings
  • Amazon Inspector: Vulnerability findings
  • Amazon Macie: Sensitive data findings
  • IAM Access Analyzer: External and unused access findings
  • Partner products: Send and receive findings with third-party tools
• Automation: Respond to findings without manual steps
  • Automation rules: Update or suppress findings as they arrive
  • Amazon EventBridge: Trigger remediation with Lambda or Systems Manager Automation
  • Ticketing: Send findings to Jira or ServiceNow
• Multi-account: Manage many accounts and Regions together
  • Delegated administrator: Manage member accounts from one account
  • Central configuration: Policies that set which services and capabilities are on in member accounts
  • Cross-Region aggregation: See findings from all Regions in one home Region