Security, Identity, and Compliance
AWS Security Hub
The exam-guide name for the service whose current posture capability, AWS Security Hub CSPM, aggregates security findings and evaluates cloud-security posture.
Key points
- Security Hub CSPM gives a consolidated view of findings from supported AWS and partner services.
- Security standards and controls help identify posture gaps.
- The current name should be recognized alongside the exam guide's AWS Security Hub wording.
Best-known use cases
- Centralize findings from GuardDuty, Inspector, and other sources.
- Evaluate cloud resources against supported security controls.
What candidates often confuse it with
- Security Hub aggregates posture and findings; GuardDuty detects threats and Inspector finds vulnerabilities.
- Artifact provides compliance reports rather than live security findings.
Key Cloud Practitioner takeaway
Choose Security Hub when the requirement is a consolidated security-posture and findings view.
Related services
- Amazon GuardDuty
- Amazon Inspector
- AWS Artifact
Relevant exam tasks
- D2.2