AWS Security Hub Primer

AWS Security Hub Primer

AWS Security Hub provides you with a comprehensive view of your security state within AWS and your compliance with security standards and best practices. This self-paced course provides an overview of the service then dives into monitoring your account by ingesting findings, analyzing insights, and taking action. You will also learn how to monitor and automate compliance.

• Course level: Intermediate

• Duration: 2.5 hours

Activities

This course includes presentations, demonstrations, videos, and assessments.

Course objectives

In this course, you will learn to:

• Describe how AWS Security Hub was designed to solve common security challenges that are the responsibility of the customer

• Describe how to access and configure Security Hub with the standard settings

• Describe how to enable and manage AWS and third-party Security Hub integrations

• Use Security Hub findings to identify, classify, and take action on security issues

• Use the console to view and take action on managed and custom insights in Security Hub

• Describe how Security Hub uses security standards to understand and take action for compliance

• Calculate estimated costs for Security Hub using the Security Hub

Intended audience

This course is intended for:

• Security engineers

• Security architects

• Information security professionals

Prerequisites

We recommend that attendees of this course have:

• Completed AWS Security Fundamentals or AWS Security Essentials

• Working knowledge of IT security practices and infrastructure concepts

• 1-2 years of cloud security experience

Course outline

Section 1: AWS Security Hub 101

• Introduction to AWS Security Hub

• Set up Security Hub

• Security Standards 101

• Security Hub Pricing

Section 2: Multiple Formats

• Help! I have multiple security alert formats.

• AWS Service Integrations

•Third-party Integrations

• Custom Integrations

Section 3: Prioritization

• Help! I have too many security alerts.

• Findings

• Insights

Section 4: Visibility

• Help! I need better visibility into my security posture.

• Take Action Manually

• Auto Remediation

Section 5: Compliance Backlog

• Help! I have a backlog of compliance requirements.

• Automated Security Checks

• Understand the Security Check Output

Section 6: What’s Next

• References and Resources

• AWS Security Hub Workshop

• Next Steps