2 回答
- 最新
- 投票最多
- 评论最多
0
Hi,
In principle, you should move security hub logs to an s3 bucket of choice, and then use Athena to query from that bucket.
You can check these out:
- https://github.com/aws-samples/aws-security-hub-findings-export
- https://aws.amazon.com/blogs/security/export-historical-security-hub-findings-to-an-s3-bucket-to-enable-complex-analytics/
Hope it helps ;)
0
Hey there!
You can use the new service, Amazon Security Lake, which automatically sends security hub findings to an S3 bucket and sets up Athena for you.
For more details, see here: https://docs.aws.amazon.com/security-lake/latest/userguide/internal-sources.html
已回答 1 年前
相关内容
- AWS 官方已更新 1 年前
- AWS 官方已更新 2 年前
- AWS 官方已更新 2 年前