AWS Security Hub
- What it is
- Central aggregation point for security findings across accounts, Regions, and services.
- Normalizes everything into the AWS Security Finding Format (ASFF).
- What feeds it
- Amazon GuardDuty, Amazon Inspector, Amazon Macie, AWS Config, AWS Firewall Manager, IAM Access Analyzer, and third-party partner tools.
- What it adds
- Automated compliance checks against standards: AWS Foundational Security Best Practices, CIS Benchmarks, PCI DSS, NIST 800-53.
- Security scores, prioritized findings, and automated response via Amazon EventBridge.
- Not to be confused with
- The detection services that feed it — Security Hub finds nothing on its own.
- AWS Audit Manager — collects evidence for a formal audit; Security Hub is operational security posture.