AWS Security Hub: Getting Started & Practical Demo

Security Hub is a Cloud Security Posture Management (CSPM) service that you can use to perform security best practice checks, aggregate alerts, and enable automated remediation. It works with multiple of AWS' security services (including GuardDuty, Config, Inspector, Firewall Manager, etc...) and it can take findings from all of those sources to aggregate them and prioritize them.
It can also run security best practice configuration checks with the AWS Foundation Security Best Practices standard, as well as other industry benchmarks like CIS and PCI.
In this video, we start by covering important concepts about this service, and we then dive into a hands-on demo of how to:
1) Enable Security Hub
2) Review security findings
3) Remediate a security finding
💬 Chat with me
Discord: cybr.com/discord
LinkedIn: / christophelimpalair
Website: cybr.com
Twitter: / christophelimp
🔗 Links mentioned in the video:
- AWS Security Hub: aws.amazon.com/security-hub/
- Security Hub Documentation: docs.aws.amazon.com/securityh...
- Security Hub Pricing: aws.amazon.com/security-hub/p...
- AWS Foundational Security Best Practices (FSBP) standard: docs.aws.amazon.com/securityh...
- Remediation documentation: docs.aws.amazon.com/securityh...
🎓 Courses
- Introduction to AWS Security: cybr.com/courses/introduction...
🚨 Disclaimer
This video is strictly for educational purposes and to teach you how you can detect and mitigate threats from your or your employer's cloud environments. Learning about real threats, ethical hacking, and penetration testing is an important way of protecting ourselves against threat actors.
⏱ Timestamps:
00:00 - 00:22 - About Security Hub
00:23 - 00:39 - Supported services
00:40 - 01:32 - What Security Hub does
01:33 - 02:51 - Enable Security Hub
02:52 - 04:48 - Walkthrough of features
05:48 - 06:16 - Reviewing security findings and results
06:17 - 07:38 - Remediating a security issue
07:39 - 07:51 - Viewing a history of changes
07:52 - 08:10 - Conclusion
#cybersecurity #awssecurity #cloudsecurity #monitoring #alerting #securityhub #securityassessment

[@varunaws4432]

Thanks for posting overview of Security Hub

[@Cybrcom]

🙌

[@user-lj9nd4id6g]

awesome 😊

[@DhanBdrKarki]

i'm getting issues like "The security score cannot be calculated until AWS Config is enabled and resource recording is configured."

[@Cybrcom]

Some parts of Security Hub rely on AWS Config to be enabled and running with resource recording to work, which is why you're getting that error

[@DhanBdrKarki]

@@Cybrcom thank you