AWS Security Hub whittles down SIEM merchants' snacks

Amazon Web Services has rolled out its Security Hub – a SIEM aggregator item – with an end goal to snaffle a portion of the worthwhile cloud SIEM advertise for itself.

The item, revealed as commonly accessible to world+dog toward the beginning of today, is charged as permitting AWS clients to "rapidly observe their whole AWS security and consistence state in one spot, thus help to recognize explicit records and assets that require consideration."

For potential clients, the thought is straightforward: rather than being barraged by cautions about security disasters, config cataclysms and consistence cockups, Security Hub is planned to "bring the majority of this data together in one spot". You get a lot of diagrams, dashboards and so forth: fundamentally it's a SIEM aggregator, with remediation tips tossed in as well.

Most stressing to contending security organizations with comparative results of their own will be the evaluating model. Clients will pay "just for the consistence checks performed and security discoveries ingested", with the initial 10,000 security discoveries for every month tossed in free. After those first 10k the evaluating is $0.0010 per check for the initial 100,000 consistence checks for each record every month, dropping down to $0.0008 per check for the following 400k, and to $0.0005 per check for everything well beyond that.

As is dependably the situation with cloud administrations, clients would do well to keep a tab on the expenses to guarantee they don't winding and result in a dreadful astonishment at the month's end.

In a canned articulation, Dan Plastina, AWS veep for External Security Services, depicted Security Hub as the "stick that associates" outsider security products with its own open cloud administrations.

Work processes

"By consolidating robotized consistence checks, the conglomeration of discoveries from in excess of 30 diverse AWS and accomplice sources, and accomplice empowered reaction and remediation work processes, AWS Security Hub gives clients a basic method to bind together administration of their security and consistence."

AWS referenced a considerable rundown of merchants in its announcement, including Barracuda, Palo Alto Networks, Guardicore, Sophos, Atlassian, IBM, and McAfee, who "have manufactured incorporations with AWS Security Hub." Notably missing is Alienvault (presently AT&T Security), while Splunk is named.

For reasons that are evident when you consider it, AWS likewise provided a canned citation from Pokemon Go's Jacob Bornemann, who opined: "We were thinking about structure out our own consistence rules for the CIS AWS Foundations Benchmark, however AWS Security Hub made it easy to enact these consistence checks consequently."