AWS-Security Hub

• Security Hub provides a comprehensive view of security state within AWS and compliance with security standards & best practices.

• It eliminates the complexity and reduces the effort of managing and improving the security of AWS accounts & workloads.

• It is a regional service.

• It creates a score to show users how they're doing against security standards & displays it on the main Security Hub dashboard.

• It is focused on automated security checks.

• It uses two mechanisms to help prioritize findings: insights & security standards.

• It supports workflow options by enabling the export of findings via CloudWatch events.

• It does not replicate the setup, configuration or specialized features available within each security service.

• In order for Security Hub to run security checks in an account, users must have AWS Config enabled in that account.

• There are two pricing dimensions for Security Hub: number of security checks per account/region/month & number of finding ingestion events per account/region/month.