Summary
This chapter concludes Section 2 on incident response, with a review of the AWS services Security Hub and GuardDuty. You explored how the GuardDuty service works and how it presents its findings. You also walked through setting up the GuardDuty service from the Amazon Management Console.
You then took a look at the Amazon Security Hub service and examined how it can present security findings from AWS security services, such as GuardDuty, Amazon Macie, Amazon Inspector, AWS Firewall Manager, and third-party services in a unified view, thereby making tracking your security posture much easier on yourself as a security professional.
Chapter 7, Logs Generated by AWS Services, will begin the next domain in the AWS Security Specialty exam, logging and monitoring. This domain concerns the different types of logs you can capture, how to do so, and what they tell you.
