A configuration package to enable AWS Security Hub in an AWS account including service prerequisites and notification. AWS Security Hub turns on CIS AWS Foundations Compliance Standards by default.
CloudFormation
AI CloudAdvisor (Beta)
Configuration Stack0
My Presets
Security Controls
AWS Services
VPC Security Controls
EC2 Security Controls
IAM Security Controls
S3 Security Controls
RDS Security Controls
OpenSearch/Elasticsearch Security Controls
EFS Security Controls
Route53 Security Controls
DynamoDB Security Controls
ECR Security Controls
EMR Security
Lambda Security
CloudFormation Security
CodeX Security Controls
CloudFront Security
AWS Certificate Manager (ACM) Security
Amazon GuardDuty
Amazon Inspector
AWS Security Hub
AWS Network FirewallRoute53 Resolver Security
Amazon Macie
AWS WAF
AWS Secrets Manager
AWS Systems Manager
AWS KMS
AWS SSO
Load Balancers
RDS Event Subscriptions
AWS Resource Access Manager (RAM)
Alexa Skill
Amazon API Gateway
AWS AppConfig
Amazon AppFlow
AWS App Mesh
AWS App Runner
AWS AppSync
Application Auto Scaling
Amazon Athena
AWS Batch
AWS Billing Conductor
AWS Clean Rooms
AWS SNS
AWS SQS
AWS Service Discovery
AWS Step Functions
AWS CloudTrail
AWS Config
AWS CloudWatch
AWS Cognito
Amazon ConnectGuided Walkthroughs
Configuration Packages
Reference Guides
Other
AWS Security Hub
A collection of AWS Security controls for AWS Security Hub. Configuration items include templates to set up AWS Security Hub in an account as well as templates to enable compliance standards checking such as CIS AWS Foundations
Security Hub
Configuration to enable AWS Security Hub in an AWS Account, with option to configure security standards such as CIS Foundation Benchmarks.
CloudFormationTerraformAWS CLI
CloudWatch Events
A CloudWatch Event Rule that triggers on AWS Security Hub findings. The Event Rule can be used to trigger notifications or remediative actions using AWS Lambda.
CloudFormationTerraformAWS CLI
Config Rule
A config rule that checks that AWS Security Hub is enabled for an AWS account. The rule is NON_COMPLIANT if Security Hub is not enabled.
CloudFormationTerraformAWS CLI
Service Control Policy
This SCP prevents users or roles in any affected account from disabling AWS Security Hub, deleting member accounts or disassociating an account from a master Security Hub account.
CloudFormationTerraformAWS CLI
Filter by source
Security Hub
CloudWatch Events
Config Rule
Service Control Policy