4 ms·
Why not use AWS Security Hub? It already supports reading in all your accounts into a centralized report and running it against multiple standards. You do pay
by bearjaws 4y ago
Why not use AWS Security Hub? It already supports reading in all your accounts into a centralized report and running it against multiple standards.
You do pay for it (~$30 a month for my job) but you quite literally check a box and have no setup.
- wronglebowski 4y agoI'm a big fan of Security Hub, it's a great tool for smaller shops to have better native visibility in their environment. My main issue with it is the standards, PCI, AWS Foundations. These all have "Versions" which aren't controllable. For example AWS Foundations has been at 1.0.0 for over two years, despite receiving several updates and changes over time.