Understanding integrations in Security Hub - AWS Security Hub

Understanding integrations in Security Hub

AWS Security Hub can ingest security findings from several AWS services and supported third-party AWS Partner Network security solutions. These integrations can help you get a comprehensive view of security and compliance across your AWS environment.

Security Hub ingests findings from integrated solutions and converts them into the AWS Security Finding Format (ASFF).

Important

From the supported AWS and third-party product integrations, Security Hub receives and consolidates only findings that are generated after you enable Security Hub in your AWS accounts.

The service doesn't retroactively receive and consolidate security findings that were generated before you enabled Security Hub.

The Integrations page of the Security Hub console provides access to available AWS and third-party product integrations. The Security Hub API also has operations for managing integrations.

An integration might not be available in all AWS Regions. If an integration isn't supported in the Region that you are currently signed in to on the Security Hub console, it doesn't appear on the Integrations page.

For a list of integrations that are available in the China Regions and AWS GovCloud (US), see Integrations that are supported in China (Beijing) and China (Ningxia) and Integrations that are supported in AWS GovCloud (US-East) and AWS GovCloud (US-West).

In addition to AWS service and built-in third-party integrations, you can also integrate custom security products with Security Hub. For information, see Integrating Security Hub with custom products.