AWS › AWS Security Hub & GuardDuty

What is AWS Security Hub and how does it aggregate security findings from multiple sources?

Beginner

Answer

AWS Security Hub provides a centralized view of your security posture across an AWS account or organization, automatically aggregating findings from services like GuardDuty, Inspector, and Macie, along with checks against security standards such as the Center for Internet Security benchmarks, giving security teams a single dashboard to review and prioritize security issues instead of needing to check multiple separate services individually.
aws securityhub enable-security-hub
Real-world example A security team uses Security Hub as a single dashboard to review findings from GuardDuty threat detection, Inspector vulnerability scans, and AWS Config compliance checks all together, rather than needing to log into each service separately every day.

Common follow-ups: What security standards does Security Hub check compliance against by default?;How does Security Hub prioritize findings from different sources?