Skip to content

Setting up AWS Config to help inventory resources while using Security Hub

0

I have an Organization setup with one account running Security Hub over all the other accounts. When I setup Security Hub I remember I had to setup Config in all my accounts too which I did. I do not want to break Security Hub but I do want to use Config to monitor and report on our resources in use. I am trying to do this from the account that is the aggregate account for both Security Hub and Config.

In Config when I look at Resource Inventory I see a resource count thats not even close to the correct number of resources we have across all accounts. If I search for resources by type like EC2 I get nothing back. If I go in to an account that does have EC2 instances and do the same thing I see the list of instances.

Why is this not working in the aggregate account? When I set this all up I used the CF template Security Hub provided and I verified that all the accounts were connected. And at least for Security Hub it does seem to work and show me results across all the accounts.

1 Answer
0
Accepted Answer

I figured it out. You cannot look under resources but you have to do an Advanced Query and select the aggregator.

answered 2 years ago

EXPERT

reviewed 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.