How can I use Security Hub to monitor security issues for my AWS environment?

Resolution

Prerequisites:

• Confirm that you've started the AWS Config configuration recorder.
• Confirm that you've created a target for your EventBridge rule, such as an Amazon SNS topic, AWS Lambda function, or other supported targets.

To automate remediation of Security Hub CSPM findings, create custom actions that send findings to Amazon EventBridge. EventBridge rules can then trigger automated responses through targets such as Lambda functions, SNS topics, or other AWS services.

Create a custom action

Create a custom action in the Security Hub CSPM console.

Define a rule in EventBridge

Define a rule in the EventBridge console.

Send findings to EventBridge

After you create a custom action in the Security Hub CSPM console and define a rule in EventBridge, send your finding to EventBridge.

Note: If you created cross-Region aggregation and manage finding from the aggregation Region, then create custom actions in that Region. For more information, see Findings in AWS Security Hub CSPM.

Related information

What are Security Hub and Security Hub CSPM?

AWS Security Hub CSPM endpoints and quotas

Benefits of AWS Security Hub CSPM