Security hub initially configured for all regions.

Question

When I setup Security Hub in my AWS Org I accidentally had it looking at all AWS regions.  After seeing findings for regions that I do not have setup in our Org I reconfigured Security Hub with the correct regions.  My question is will the findings for the unconfigured regions just go away at some point?  Or do I need to do something to remove those findings?

Yawar · Answer

These findings from unconfigured regions in AWS Security Hub will not automatically go away after you reconfigure Security Hub only to include the correct regions. These findings remain in the Security Hub until they are manually archived, suppressed, or their status changes.

Here is what you can do on your side:

**Archive Findings for Unused Regions**
You can manually archive the findings for the regions you no longer monitor. This ensures they don’t appear in your active findings list but keeps them available for audit or review later.

Go to the Security Hub console.
Filter findings by the regions you no longer monitor.
Select the findings and choose "Archive."

I hope this help. thanks

Security hub initially configured for all regions.

Add your answer

Relevant content