Exploring AWS-native security tools

AWS provides you with two native tools that will be especially useful to you as a pentester: AWS Security Hub and Amazon Inspector.

First, let’s take a look at AWS Security Hub.

AWS Security Hub

AWS Security Hub is an easy way to view all of your AWS security configurations, AWS-native security scan reports, and security alerts. It can combine data from Amazon GuardDuty, Amazon Inspector, Amazon Macie, and AWS Network Firewall.

If there are any major security problems in your AWS instance, AWS Security Hub will notify you! You can mention data you find in AWS Security Hub in your pentest report. But by conducting vulnerability scans and pentests with third-party applications, you may be able to find additional vulnerabilities. I recommend using both the tools AWS provides and third-party tools to get the most thorough data about the security posture of your AWS instance.

Let’s take a look at AWS Security Hub for the first...