What are the features of Security Hub & AWS Identity?

Security Hub

AWS Security Hub helps in providing a detailed view of the security alerts and the compliance status which can be found across AWS accounts. AWS provides a wide variety of security tools that can be utilized by the user. This includes firewalls, endpoint protection, vulnerability scanners and compliance scanners. Different requirements need different types and levels of security. This is when developers will end up juggling between the security features specific to that requirement. This is where Security Hub comes into play. It is a one-stop place that aggregates, organizes, and provides priority to security alerts and observations for many AWS services as well as AWS Partner Solutions. The analysis can be visually observed on the dashboards which are integrated into graphs and tables, that changed based on the data supplied to it.

Environment of the instance can be monitored continuously with the help of automated compliance checks. These checks are based on the AWS best practices and industry standards.

Features of Security Hub:

• It reduces the efforts required in collecting and prioritizing which resource needs what type of security.
• It takes swift actions on the security observations which it performs.
• Trends and potential issues can be identified and the process of finding solutions can be initiated right then.
• Automated and continuous configuration and compliance checks can be performed that provides a compliance score. This score can be used to identify resources and user account that need more attention.

AWS Identity

It helps the user to securely control and access different AWS services and resources which are used by multiple users. It can be used to create and manage AWS users and groups, thereby providing or removing permissions to access certain AWS resources. Identity federation can be allowed with currently working identities (which includes users, groups, and roles) which can be used to access AWS resources without having to create an IAM user for every identity.

Features of AWS Identity:

• It provides fine-grained access control to resources in AWS, providing specific access to control users regarding their originating IP address, the protocols they use, and whether they use any authentication mechanisms.  
• It provides multi-factor authentication (MFA) techniques which requires the users to provide a valid MFA code.
• It can be integrated with corporate directory to provide access to AWS Management console and APIs.
• Mobile applications can be managed and can be used to securely access AWS resources by obtaining temporary security credentials which grant specific access to specific AWS resources for a specific period of time.