AWS CloudTrail vs. AWS Security Hub

AWS Security Hub

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
AWS CloudTrail	Score 8.5 out of 10	N/A	AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of an AWS account. With CloudTrail, users can log, continuously monitor, and retain account activity related to actions across AWS infrastructure. CloudTrail provides event history of AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking,…	N/A
AWS Security Hub	Score 8.4 out of 10	N/A	AWS Security Hub gives users a comprehensive view of your high-priority security alerts and security posture across AWS accounts. With Security Hub, users have a single place that aggregates, organizes, and prioritizes security alerts, or findings, from multiple AWS services, such as Amazon GuardDuty, Amazon Inspector, Amazon Macie, AWS Identity and Access Management (IAM) Access Analyzer, and AWS Firewall Manager, as well as from AWS Partner solutions.	N/A

Pricing

AWS CloudTrail

AWS Security Hub

Editions & Modules

No answers on this topic

Offerings

Pricing Offerings
AWS CloudTrail	AWS Security Hub
Free Trial
Yes	No
Free/Freemium Version
Yes	No
Premium Consulting/Integration Services
Yes	No

Entry-level Setup Fee

No setup fee

Additional Details

You can view, filter, and download the most recent 90 days of your account activity for all management events in supported AWS services free of charge. You can set up a trail that delivers a single copy of management events in each region free of charge. Once a CloudTrail trail is set up, Amazon S3 charges apply based on your usage. You will be charged for any data events or additional copies of management events recorded in that region. In addition, you can choose CloudTrail Insights by enabling Insights events in your trails. CloudTrail Insights analyzes write management events, and you are charged based on the number of events that are analyzed in that region.

—

More Pricing Information

Community Pulse
	AWS CloudTrail	AWS Security Hub
Top Pros	Pro Easy implementation Pro Extremely powerful Pro Ec2 instance	Pro Cost effective Pro Support team Pro Saves time
Top Cons	Minus 90 days Minus User interface	Minus Negative experience Minus Not clear Minus Setting up

Best Alternatives
	AWS CloudTrail	AWS Security Hub
Small Businesses	Acronis Cyber Protect Cloud Score 8.2 out of 10	No answers on this topic
Medium-sized Companies	Druva Data Resiliency Cloud Score 9.6 out of 10	Freshservice Score 8.7 out of 10
Enterprises	Druva Data Resiliency Cloud Score 9.6 out of 10	Freshservice Score 8.7 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	AWS CloudTrail	AWS Security Hub
Likelihood to Recommend	8.0 (4 ratings)	9.0 (4 ratings)

User Testimonials
	AWS CloudTrail	AWS Security Hub
Likelihood to Recommend	Amazon AWS It is necessary to enable [AWS] Cloudtrail when using AWS in a production environment, otherwise you will not have any idea what is happening within your accounts. Third party monitoring applications will all require [AWS] CloudTrail to be enabled as well. I would not recommend it solely as a monitoring tool, to get the most out of it you must send the logs elsewhere. Either to Cloudwatch logs or a third party product. Incentivized Verified User Anonymous Read full review	Amazon AWS I don't think there's yet a perfect tool in this category of security and incident aggregators, but AWS Security Hub is an excellent tool for having visibility into our overall security posture. It is a great aggregator for many AWS services but also for third party security tools with which it integrates really well. Incentivized Verified User Anonymous Read full review
Pros	Amazon AWS API Log User activity tracking Real-time alerts Incentivized AS Anton Smyslov Product Owner Read full review	Amazon AWS Alerting Aggregation, organization and prioritization of security alerts and events Third party integration Incentivized Verified User Anonymous Read full review
Cons	Amazon AWS [In my experience] Cost can easily get out of control with multiple trails on full logging Logs can be difficult to decipher Incentivized Verified User Anonymous Read full review	Amazon AWS Not easy to read past data, especially once it moves into Glacier deep storage performance is somewhat sluggish ... other systems are much faster to analyze data Doesn't always provide a remediation solution or suggested fix like other 3rd party tools like Qualys. It's hard to get the initial configuration and enrollment completed as there's a lot of manual intervention for every configured rule that needs to be enabled alerts are often times delayed Incentivized Verified User Anonymous Read full review
Alternatives Considered	Amazon AWS I think in the end, CloudTrail has more features and you can dive deeper inside the logs so it depends on your usage and what you expect in the end to make the right choice, I would say that both tools are really useful and bring a lot of benefits to I.T. companies. Incentivized Verified User Anonymous Read full review	Amazon AWS AWS Security Hub is it's own unique program that I have used. I haven't used anything similar to it and it was worth it to try out. However, for those that want to keep for long, it will be very heavy in term of budget and resource that they have to provide. Incentivized Duc Minh Nguyen President Read full review
Return on Investment	Amazon AWS Allows us to investigate any strange api actions Increases security Audit trail of changes made in AWS Incentivized Verified User Anonymous Read full review	Amazon AWS Since we have started using this, we could notice a drop of security issues Incentivized Verified User Anonymous Read full review
ScreenShots	AWS CloudTrail Screenshots