AWS Security Hub vs. AWS Trusted Advisor

I don't think there's yet a perfect tool in this category of security and incident aggregators, but AWS Security Hub is an excellent tool for having visibility into our overall security posture. It is a great aggregator for many AWS services but also for third party security tools with which it integrates really well.

Incentivized

It is well suited for an organization that uses AWS tools and technologies. as AWS is very popular in the market. you can use almost any service with it. the only thing is your organization must be using AWS services. It is not also cheap so the price can be the issue.

Incentivized

• Alerting
• Aggregation, organization and prioritization of security alerts and events
• Third party integration

Incentivized

• Cost Optimization
• Effective use of services
• Performance Report

Incentivized

• Not easy to read past data, especially once it moves into Glacier deep storage
• performance is somewhat sluggish ... other systems are much faster to analyze data
• Doesn't always provide a remediation solution or suggested fix like other 3rd party tools like Qualys.
• It's hard to get the initial configuration and enrollment completed as there's a lot of manual intervention for every configured rule that needs to be enabled
• alerts are often times delayed

Incentivized

• Although It Provides very good recommendations some times they do not seem logical.
• Cost estimation can be improved further for particular services
• Need to have a business or Enterprise plan to access you can give some trial period to try

Incentivized

AWS Security Hub is it's own unique program that I have used. I haven't used anything similar to it and it was worth it to try out. However, for those that want to keep for long, it will be very heavy in term of budget and resource that they have to provide.

Incentivized

It does a good job not only it provides cost estimation but also it provides security measures that we have to take to make sure that we are not vulnerable to attacks. It also gives a performance report which helps to analyze the resource allocation and free resources more effectively.

Incentivized

• Since we have started using this, we could notice a drop of security issues

Incentivized

• Optimized resources
• less security attacks
• Saved from overbudget

Incentivized