AWS Security Hub vs. Azure Monitor

I don't think there's yet a perfect tool in this category of security and incident aggregators, but AWS Security Hub is an excellent tool for having visibility into our overall security posture. It is a great aggregator for many AWS services but also for third party security tools with which it integrates really well.

Incentivized

We were able to get a single pane of glass for all our monitoring needs on Azure Monitor. However, we would like to see it improve to auto scale out and scale in depending on the load without human intervention. This can help us get to the No Ops model and rely on automated processes rather than manual intervention.

Incentivized

• Alerting
• Aggregation, organization and prioritization of security alerts and events
• Third party integration

Incentivized

• It supports all the Azure PAAS services.
• Can monitor both infrastructure and application

Incentivized

• Not easy to read past data, especially once it moves into Glacier deep storage
• performance is somewhat sluggish ... other systems are much faster to analyze data
• Doesn't always provide a remediation solution or suggested fix like other 3rd party tools like Qualys.
• It's hard to get the initial configuration and enrollment completed as there's a lot of manual intervention for every configured rule that needs to be enabled
• alerts are often times delayed

Incentivized

• Custom metrics
• Ease of use

Incentivized

I have not had to work with Azure Monitor support, so it is difficult to say how well the support team is. I assume that Azure has a well-versed team on the customer service side to assist with any issues customers may have. I may need them in the feature.

Incentivized

AWS Security Hub is it's own unique program that I have used. I haven't used anything similar to it and it was worth it to try out. However, for those that want to keep for long, it will be very heavy in term of budget and resource that they have to provide.

Incentivized

While other tools have their own unique capability, Azure Monitor helps us monitor essential PAAS services that are not supported by other tools. So even though we have one other APM tool, we still rely on Azure Monitor for some of the special PAAS services, this is a huge advantage.

Incentivized

• Since we have started using this, we could notice a drop of security issues

Incentivized

• We are able to react quickly to the issues.
• Debugging sessions are yielding quicker results to generate RCA.

Incentivized