Security Hub with AWS Config

To ensure that Security Hub Security Standard checks, such as the AWS Foundational Security Best Practices (FSBP), work properly, you need to enable AWS Config to record the necessary resources. Here’s how you can proceed:

Review the AWS FSBP Documentation:

• Refer to the AWS FSBP Documentation. This documentation contains detailed information about the services monitored by each control within the AWS FSBP. Each control starts with a Service Name.

Enable Relevant Services:

• Identify all the services listed in the AWS FSBP documentation.
• Enable these services in each region as part of your Config Resource Types in the AWS Config recording settings.

Additional Resources:

Before enabling AWS Config, review the following prerequisites and setup guidelines:

• Security Hub Setup Prerequisites
• AWS Security Hub multi-account scripts

By following these steps and enabling the necessary resources, you can ensure that the Security Hub Security Standard checks function correctly.