Monitoring: AWS Security Hub

AWS Security Hub is a cloud service that helps you manage and reduce threats to your AWS environments. It provides continuous security monitoring, notification and automation of security configurations.

Why should you monitor AWS Security Hub findings?

The AWS Security Hub continously checks the compliance of AWS resources. Also 3rd parties send their security notifications to the AWS Security Hub. It is crucial to get notified about new Security Hub findings immediatly to mitigate risks as fast as possible.

How does monitoring AWS Security Hub work?

Without further ado, marbot notifies you about Security Hub findings and supports the following security standarts.

• AWS Foundational Security Best Practices
• CIS AWS Foundations Benchmark
• CIS AWS Foundations Benchmark
• PCI DSS v3.2.1

On top of that, marbot also supports findings from 3rd parties. For example, bucketAV (Antivirus protection for Amazon S3).

Here is, what an alert informing you about a Security Hub findings looks like in Microsoft Teams.

And here is the same alert in Slack.

How to setup monitoring of AWS Security Hub?

marbot works with Slack and Microsoft Teams. Please select your platform and follow the Getting started guide.

• marbot for Slack
• marbot for Microsoft Teams