AWS Security Hub Reviews

I use Security Hub primarily for security purposes. It is meant to secure the infrastructure, check compliance, and ensure there are no security gaps. By enabling Security Hub, the system provides a security score and areas for improvement.

Security Hub provides insightful information about what is running and where there might be weaknesses. It offers best practice recommendations and supports various compliance standards such as ISO and PCI DSS. Enabling these compliance checks helps identify non-compliant services and suggests steps to achieve compliance. The main advantage is providing information and compliance insights rather than prevention.

Security Hub is used to analyze the configuration of our infrastructure. After analyzing, it provides security findings based on best practices and other industry standards. It is used to combine with GuardDuty to notify us of any security issues flagged in our infrastructure configuration. It is convenient for use in a multi-account security management setup by managing security findings and aggregating them from a single management account.

Measurable benefits include a streamlined process without needing to manage multiple solutions. AWS Security Hub provides seamless integration, eliminating the need to configure additional infrastructure. It is proactive in monitoring and provides early notifications for security issues, allowing us to automate responses based on identified findings.

We utilize most of the services from AWS, including our compute storage, as well as mapping and the messaging queue. We use somewhere around 70 to 80 services that AWS offers.

The advantage is that it is cloud-native, and we do not need to install agents or sensors to find findings. We made improvements to the Security Hub scoring, which has helped enhance the security posture of our accounts. 

An additional advantage is that the native AWS scoring is trusted by most auditors to determine the organization's security posture.

I use AWS Security Hub. It is fine to discuss my experience with AWS Security Hub. It's a native solution that we currently use by default, though we had tried other tools.

We only enable CSPM and pull the logs to our A-SOC tool, and from A-SOC we are trying to view the exposure.

We tried Prisma Cloud, Qualys, and Skyhigh, which is another product we are looking at for CNAPP production. We use other tools to do cloud network security production and application production.

AWS Security Hub helps with automated and continuous updated compliance checks, but with continuous monitoring, it becomes costly.

The solution is not very affordable and is really a pricey product.

Currently, that's the only solution available now. We are using it because we are supposed to use it. It's not finding great vulnerabilities first, there are some configuration and other issues that it is bringing out. We want to explore more.

We are getting definite benefits because many of the app teams which we have worked with generally set it up the first time and after that don't look at it from the configuration point of view. AWS Security Hub brings many features into one table that is quite useful, and the app team finds it easier to see what is missing.

We use AWS Security Hub to monitor resources and check compliance scores regarding configuring our solutions on the platform. Security Hub helps us establish a compliance baseline to evaluate if our resources meet AWS standards. It can also integrate with other AWS services, such as AWS Config and AWS Detective, to set up rules and scan our infrastructure to determine if we comply.

AWS Security Hub can check your infrastructure against multiple compliance frameworks. You can turn on or off specific frameworks based on your needs. For example, if you're working in a PCI environment, you can activate the PCI framework, and Security Hub will evaluate your configuration and provide a score based on that framework. You can assess compliance with various standards, such as PCI, AWS CIS, and other frameworks. 

We use it to get a comprehensive view of all the processes within the company. It provides us with centralized security insight, available on a dashboard for all of the users while running continuous and automated compliance checks.

My primary use case involves implementing AWS Security Hub as part of my role. We use AWS Security Hub for integrating daily security operations, as all our workloads run on AWS. 

We utilize AWS Security Hub to track security scores, check critical checks, and identify high-impact checks so that corrective actions can be taken.

AWS provides various recommendations for cost-cutting measures and optimal utilization of services. These recommendations aid in managing costs and improving efficiency across Security Hub usage.

We use AWS Security Hub for cloud security posture management and automated remediation.

The most valuable features of the solution are the scanning of all the cloud environments and most of the compliances available in the cloud. We can integrate the findings of different services into AWS Security Hub and analyze our cloud infrastructure based on that. We inform the owners if we find anything that is non-compliant or does not adhere to the security best practices.