- Home
- Cloud Security Posture Management Software
- AWS Security Hub CSPM
On the recordRead 4 Oct 202614 facts
AWS Security Hub CSPM
Plans and prices
Security Hub Essentials
Priced on request
Per-resource charges apply to EC2 instances, ECR container images, Lambda functions, and IAM users/roles; other monitored resources are included; AWS and Azure coverage
Read 4 Oct 2026 · aws.amazon.com
Security Hub Extended Plan
Priced on request
Essentials must be enabled first; charges are additional to Essentials; 23 curated partner solutions across 10 security categories
Read 4 Oct 2026 · aws.amazon.com
Threat Analytics + Lambda Code Scanning add-ons
Priced on request
Threat Analytics covers CloudTrail management events, S3 data events, VPC Flow Logs, DNS query logs, and EKS audit logs; Lambda code scanning scans on deployment and periodically
Read 4 Oct 2026 · aws.amazon.com
On the record
- Attack path analysis
- Security Hub visualizes potential attack paths by mapping how vulnerabilities and misconfigurations could connect to critical resources.aws.amazon.com · read 4 Oct 2026
- Billing limit
- Other AWS security service capabilities not included in Security Hub plans, including remaining GuardDuty and Inspector capabilities, retain their original service billing.aws.amazon.com · read 4 Oct 2026
- Compliance support
- AWS says it supports 143 security standards and compliance certifications, including PCI-DSS, HIPAA/HITECH, FedRAMP, GDPR, FIPS 140-3, and NIST 800-171.aws.amazon.com · read 4 Oct 2026
- Frameworks
- Its standards align with AWS Foundational Security Best Practices, CIS, PCI DSS, and NIST.aws.amazon.com · read 4 Oct 2026
- Included capabilities
- The Essentials plan includes findings ingestion and aggregation, Automation Rules, CSPM, several Inspector scanning capabilities, CIS Benchmark Assessments, and a service-linked AWS Config recorder.aws.amazon.com · read 4 Oct 2026
- Intended customers
- AWS says its customers range from startups and enterprises to nonprofits and governments.aws.amazon.com · read 4 Oct 2026
- Multicloud
- Security Hub can extend visibility to Microsoft Azure resources, including virtual machines, container images, Function Apps, and identities.aws.amazon.com · read 4 Oct 2026
- Partner integrations
- The Extended Plan offers curated partner solutions across endpoint, identity, email, network, data, browser, cloud, AI, security operations, and supply chain categories.aws.amazon.com · read 4 Oct 2026
- Pricing scope
- Per-resource pricing applies to EC2 instances, ECR container images, Lambda functions, and IAM users and roles; other monitored resources are included.aws.amazon.com · read 4 Oct 2026
- Purpose
- AWS Security Hub CSPM checks AWS resources against security best practices and combines findings from AWS security services and partner tools to identify misconfigurations and assess security posture.aws.amazon.com · read 4 Oct 2026
- Response automation
- Security Hub provides automated response workflows to streamline remediation at scale.aws.amazon.com · read 4 Oct 2026
- Risk prioritization
- Security Hub correlates and enriches findings to prioritize critical issues across accounts and AWS Regions, with customizable dashboard widgets and near-real-time risk analytics.aws.amazon.com · read 4 Oct 2026
- Shared responsibility
- AWS states security and compliance are shared responsibilities, with customers responsible for guest operating systems, application software, and configuration of AWS security group firewalls.aws.amazon.com · read 4 Oct 2026
- Support and procurement
- AWS describes Security Hub as offering one consolidated bill, consolidated support, and flexible pricing across AWS and partner solutions.aws.amazon.com · read 4 Oct 2026
