Another security service, AWS Security Hub, can also be used to help detect and remediate security incidents. It is designed to help you centralize many of your security findings, alerts, and compliance reports from numerous different AWS security services, including the following:
- AWS Identity and Access Management (IAM)
- Amazon Macie
- Amazon GuardDuty
- Amazon Inspector
- AWS Firewall Manager
In addition to these native AWS services, it can also be incorporated into any third-party partner solutions, such as Sumo Logic, Splunk, and many more, that you might already be using within your organization. A full list of these partners can be found at https://aws.amazon.com/security-hub/partners/.
By acting as a security hub, the service acts as a single-pane-of-glass approach to the security notifications used across your accounts. This allows the service to categorize and prioritize all events from multiple sources, allowing you to gain a deep understanding of any...
