Summary
This chapter concludes Section 2 on incident response with a review of AWS services of Security Hub and GuardDuty. You explored how the GuardDuty service works and how it presents its findings. You also took a walkthrough of setting up the GuardDuty service from the Amazon Management Console.
You also took a look at the Amazon Security Hub service and examined how it can present security findings from AWS security services such as GuardDuty, Amazon Macie, Amazon Inspector, AWS Firewall Manager, and third-party services in a unified view, thereby making tracking your security posture much easier on yourself as a security professional.
The next chapter will begin the next domain in the AWS Security Specialty exam, Logging and Monitoring. This domain concerns the different types of logs you can capture, how to capture them, and what they tell you.
