Enable security standards

The AWS Foundational Security Best Practice (FSBP) security standard is only available in Security Hub. Enabling this does not require you to enable any confirmance packs in AWS Config. You do need to enable AWS Config to use Security Hub, but that's it. You can use conformance packs in AWS Config if you wish to do other checks, perhaps specifically for your own internal compliance control requirements. We recently launched a native integration between AWS Config and AWS Security Hub so that everything now can come together in Security Hub: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-internal-providers.html#integration-config