Security Hub Cost

Question

I have 
* account A enable Secuirty Hub & be an delegated administrator to collect findings from Security Hub Account B
* account B enable Security Hub & GuardDuty:

When GuardDuty Account B generate findings, Security Hub Account B import GuardDuty Account B findings. Then Security Hub Account A import Security Hub Account B  findings because Security Hub Account A is centralized.

I wanna ask whether I paid total cost for only 1 time Security Hub Account B import findings from GuardDuty Account B or 2 times Security Hub Findings Importing findings from Account A & Account B

Oleksii Bebych · Accepted Answer

You don't pay for importing findings

When you enable Security Hub and some Standards, Security Hub deploys own AWS Config rules and you pay for them

```
First 100,000 checks/month	$0.0010 per check
Next 400,000 checks/month	$0.0008 per check
Over 500,000 checks/month	$0.0005 per check
```

Cross-account aggregation and centralized visualization do not cost anything

`account B enable Security Hub & GuardDuty` so this costs will be on Account B

`account A enable Secuirty Hub & be an delegated administrator to collect findings from Security Hub Account B` you will have costs in Account A only if Security Hub standards were enabled in this account and you see AWS Config rules here

> Security Hub ingests findings from various AWS services and partner products. Finding ingestions include both new findings and updates to existing findings.

> You are not charged for finding ingestion events associated with Security Hub security checks.

> Security Hub offers a perpetual free tier of 10,000 finding ingestion events per month.

```
Ingested findings associated with Security Hub security checks	free
First 10,000 events/month	free
Over 10,000 events/month	$0.00003 per event
```
https://aws.amazon.com/security-hub/pricing/

Security Hub Cost

Add your answer

Relevant content