Manage findings from GuardDuty, Inspector, and Macie in one view.
Review severity and compliance with security standards.
Which service is most appropriate?
Enable AWS Security Hub to aggregate findings and security-standard compliance in one place.
Detailed explanation
Object inventory is not a security-finding aggregation service.
Object inventory is not a security-finding aggregation service.
Security Hub aggregates findings from security services and organizes them by severity and standards.
Security Hub aggregates findings from security services and organizes them by severity and standards.
DNS services do not aggregate security findings.
DNS services do not aggregate security findings.
A CDN cache does not manage security findings or standards.
A CDN cache does not manage security findings or standards.
Check official documentation
Compare the following points with the official documentation.
AWS Security Hub findings aggregationの公式説明を確認する。
What to confirm
各検出サービスとSecurity Hubの集約役割を説明できる。
Key points
- Security Hub
- Finding
- Security standard
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current AWS service behavior in the official documentation.
Foundation review
Aggregation
Centralized findings make severity and prioritization consistent across services.
Source versus manager
GuardDuty and Inspector detect; Security Hub organizes their findings.