---
title: "AWS Security Hub"
slug: "aws-security-hub"
updated: 2025-11-17T13:49:22Z
published: 2025-11-17T13:49:22Z
canonical: "docs.databee.buzz/aws-security-hub"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS Security Hub

AWS Security Hub provides you with a comprehensive view of your security state by collecting security data across AWS accounts, services, and supported third-party products to analyze security trends and identify the highest priority security issues. For more information refer to [AWS official documentation](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html).

**Integration Method:** API Ingest. Refer to t[his article for HTTP Collector](/user-manual/docs/aws-security-hub-http) ingestion procedure

**Tables**: Detection Finding (2002), Compliance Finding (2003)

This integration supports the following events.

| **Event** | **Description** |
| --- | --- |
| Findings | Retrieves the security check or security-related detection findings. |

This integration supports the following versions.

| AWS Security Hub API version | 2018-10-26 |
| --- | --- |

> [!NOTE]
> **Note:**
> 
> AWS Security Hub is a continuously updated cloud service. As of this document preparation, the latest release was on [Mar 26, 2025](https://docs.aws.amazon.com/securityhub/latest/userguide/controls-change-log.html).

## Prerequisites

## AWS Security Hub configuration

- To configure AWS Security Hub, refer [here](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-settingup.html).

## AWS Access Key and Secret Key

- Refer to this [common procedure](https://docs.databee.buzz/docs/prerequisites-aws-configuration) on how to create an IAM user, configure the AWS Access Key and AWS Secret Key, attach an IAM policy with required permissions.

## Configuration Overview

1. Generate an AWS Access Key & Secret Key with the required IAM policies.
2. Configure the [AWS Security Hub](/user-manual/docs/aws-security-hub#databee-configuration) in the DataBee console with the required Access Key and Secret Key.

| **DataBee Parameter** | **AWS Security Hub Parameter** |
| --- | --- |
| Access Key | AWS Access Key |
| Secret Key | AWS Secret Key |
| AWS Region | AWS Region |
| Service Name | securityhub |

## AWS Security Hub – IAM Policy Information

1. Start by creating an IAM user with the API credentials. This common step is documented at [AWS configuration prerequisites](https://docs.databee.buzz/docs/prerequisites-aws-configuration).
2. Once the IAM user has been created, the following permissions will need to be added to a role associated with the user. Refer to [Adding Permission to IAM user](https://docs.databee.buzz/docs/prerequisites-aws-configuration#adding-permissions-to-an-iam-user) for the steps.
3. Ensure AWS Access Key is associated with the service user which has been attached to an IAM policy with following Actions allowed. The following example shows a policy that grants read-only access to fetch security hub findings. This example shows how you might create an IAM policy that allows a user to view Security Hub findings.

Refer [here](https://docs.aws.amazon.com/securityhub/latest/userguide/security_iam_id-based-policy-examples.html#security_iam_id-based-policy-examples-view-findings) more info on the policy.

#### Required Minimum IAM policy:

```json
{
    "Version": "2012-10-17",
    "Statement":
    [
        {
            "Sid": "ReviewFindings",
            "Effect": "Allow",
            "Action":
            [
                "securityhub:GetFindings"
            ],
            "Resource": "*"
        }
    ]
}
```

## DataBee Configuration

1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/aws-security-hub-apr2025-image-zqxe0qad.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A12%3A51Z&se=2026-11-15T01%3A12%3A51Z&sr=c&sp=r&sig=zZxiOAqF2jfRL15rVgXQCeGcHhPW0wZ8URsvM%2B1AmiU%3D)
2. Search for the **AWS Security Hub** and click it as shown below. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/aws-security-hub-apr2025-image-vwrr8nnq.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A12%3A51Z&se=2026-11-15T01%3A12%3A51Z&sr=c&sp=r&sig=zZxiOAqF2jfRL15rVgXQCeGcHhPW0wZ8URsvM%2B1AmiU%3D)
3. Click on the **API Ingest** option for collection method. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/aws-security-hub-apr2025-image-7ipbhs9w.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A12%3A51Z&se=2026-11-15T01%3A12%3A51Z&sr=c&sp=r&sig=zZxiOAqF2jfRL15rVgXQCeGcHhPW0wZ8URsvM%2B1AmiU%3D)
4. Enter feed contact information and click **Next**. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/aws-security-hub-apr2025-image-wfqmhjuq.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A12%3A51Z&se=2026-11-15T01%3A12%3A51Z&sr=c&sp=r&sig=zZxiOAqF2jfRL15rVgXQCeGcHhPW0wZ8URsvM%2B1AmiU%3D)
5. In the configuration page, confirm the following:

![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/aws-security-hub-apr2025-image-omvg0w1f.png?sv=2026-02-06&spr=https&st=2026-11-15T00%3A12%3A51Z&se=2026-11-15T01%3A12%3A51Z&sr=c&sp=r&sig=zZxiOAqF2jfRL15rVgXQCeGcHhPW0wZ8URsvM%2B1AmiU%3D)
  - Authorization Method: AWS Signature
  - API Base URL: this is the base URL that DataBee will interact with. Replace AWS Region in the placeholder where security hub is configured.
  - Access key: paste the AWS client access key.
  - Secret key: paste the AWS client secret key.
  - Session token: can be left empty.
  - AWS region : region
  - Service name: securityhub
  - Event types: preselected for all the event types that integration pulls.
6. Click **Submit**.

## Troubleshooting Tips

- Ensure the Access Key, Secret Key are pasted correctly. Since you cannot view the Secret Key after the 1st time, re-create the Access Key & Secret Key, paste it on a text editor to ensure no spaces or unexpected characters are included and [reconfigure the DataBee feed](/user-manual/docs/aws-security-hub#databee-configuration).
- Ensure the appropriate AWS Security Hub privileges/permissions are correctly attached to the AWS Access Key.