AWS Certified Security – SpecialtyDomain 2: Logging and MonitoringEasy
A company is using AWS Organizations to manage multiple accounts. They need to ensure that all AWS accounts are continuously monitored for security vulnerabilities and deviations from best practices. The solution should provide a consolidated view of security posture across all accounts, integrate with existing ticketing systems, and generate security findings based on industry standards. Which AWS service is designed to address these requirements holistically?
- AAmazon GuardDuty
- BAWS Config
- CAWS Security Hub
- DAmazon Inspector
Show answer & explanationAnswer & explanation
Correct answer: C. AWS Security Hub
AWS Security Hub provides a comprehensive view of your security posture across your AWS accounts. It aggregates, organizes, and prioritizes security findings from various AWS services (like GuardDuty, Inspector, Macie, Config) and partner solutions. It also performs automated security checks against industry best practices and standards, enabling consolidated monitoring and integration with ticketing systems.
Why the other options are wrong
- A. Amazon GuardDuty is a threat detection service, focusing on malicious activity and unauthorized behavior, not on comprehensive security posture management and compliance across multiple services and accounts.
- B. AWS Config assesses and audits resource configurations for compliance, but it doesn't aggregate findings from *other* security services or provide a consolidated security posture view across accounts in the same way Security Hub does.
- D. Amazon Inspector is a vulnerability management service that scans EC2 instances and container images for vulnerabilities and unintended network exposure. It's a source of findings, but not a central aggregator for *all* security aspects across accounts.
AWS Security Hub
A cloud security posture management service that provides a comprehensive view of your high-priority security alerts and compliance status across AWS accounts.
- Aggregates findings from multiple AWS security services and partners.
- Performs automated security checks against industry standards.
- Provides a consolidated dashboard for security posture.
- Integrates with ticketing systems for workflow automation.
Memory trick: Security Hub is the central command for all security findings.