Security Hub
Monitoring & DetectionAWS Security Hub is a centralized security dashboard that aggregates findings from multiple AWS security services and third-party tools. It provides automated compliance checks against standards like CIS AWS Foundations Benchmark, AWS Foundational Security Best Practices (FSBP), and PCI DSS.
Key Features
- Aggregates findings from GuardDuty, Inspector, Macie, Firewall Manager, IAM Access Analyzer, and 60+ partner integrations
- Automated security checks against compliance frameworks
- Security score (0-100%) per standard
- Cross-region and cross-account aggregation
- Historical trend data (up to 1 year) and near real-time risk analytics (since December 2025)
- Automated response via EventBridge integration
Related AWS Services
Related Terms
AWS managed threat detection service that continuously monitors your accounts for malicious activity using CloudTrail, VPC Flow Logs, and DNS logs.
Meeting regulatory requirements and industry standards (SOC 2, HIPAA, GDPR, PCI DSS, CIS) for data protection, access control, and security practices in the cloud.
A prescriptive security configuration checklist from the Center for Internet Security that defines best practices for securing AWS accounts.
Automated tools that continuously assess cloud infrastructure for misconfigurations, compliance violations, and security risks - in AWS, provided by Security Hub and Config.
Toc Consulting: AWS Security & Cloud Architecture
Securing your AWS estate?
Our team helps engineering teams secure and architect AWS the right way: assessment in week one, a prioritized action plan in week two.