AWS Security Hub

AWS Security Hub is a security service that provides a comprehensive view of the security state of our AWS account. It collects data from various AWS accounts, services, and other third-party products to determine the security issues and sets the priority of the threat by using multiple security standards, such as AWS Foundational Security Best Practices (FSBP), Payment Card Industry Data Security Standard (PCI DSS), etc.

In addition to finding security threats in our account, Security Hub also receives data from different AWS services, such as Amazon Macie, Inspector, and GuardDuty, allowing us to fetch security issues from a single service. We can also create automated rules in Security Hub, which allow us to trigger EventBridge rules in response to some findings.

Central configuration in Security Hub

AWS Security Hub allows us to set up and manage Security Hub across multiple AWS accounts and regions from ...