SecurityHub for AWS Organizations

AWS SecurityHub enables central management of security and compliance across your whole AWS environment. Amazon’s services such as Inspector, Macie and others, as well as services from select security partners push their findings to SecurityHub which aggregates them in a single place. SecurityHub findings are separated by region. Ylastic now has SecurityHub integration, with the ability to view your findings by a single AWS account or for all AWS accounts in an AWS Organization. The findings are aggregated across ALL regions. 

image



Findings can be grouped into custom insights using aggregation statements and many kinds of filters. AWS provides a set of 30 default insights, and you can create additional insights for your environment. A quick overview of ALL insights for an AWS account or an AWS Organization along with a count of resources flagged is available. Once again the data displayed is collected from ALL regions.

image



Click on any insight in the overview to drill down further into all the resources flagged by SecurityHub from ALL regions in your account. Click any individual resource link to view all the findings.

image



Select any finding for a summary and details of the finding, as well as any other information specific to a finding.

image


Cross region, cross account SecurityHub - Global CloudOps with a single pane of glass for security information across all regions and all accounts in an AWS Organizational unit.