New partner integrations available for AWS Security Hub
AWS Security Hub has added 7 new external partner integrations bringing its total 54 integrations, including 48 external partner integrations and 6 AWS service integrations. Security Hub now supports integrations with Cloud Custodian (cloud compliance and remediation), FireEye Helix (Security Information Event Management, or SIEM), Forcepoint CASB (cloud access security broker), Forcepoint DLP (data loss prevention), Forcepoint NGFW (next-generation firewall), Rackspace Cloud Native Security (Managed Security Service Provider, or MSSP), and Vectra.ai Cognito (network anomaly detection). The Forcepoint and Vectra.ai integrations send findings from their respective product to Security Hub using the AWS Security Finding Format. FireEye receives findings from Security Hub, and Rackspace is a managed service security provider (MSSP) that leverages Security Hub to gather security and compliance information about their customers’ accounts. Setting up the integration only requires deployment of a AWS CloudFormation template or similar script. To learn more, visit the Integration pages in the Security Hub console and click on the “Configuration” link for the partner to learn more about the integration and how to set it up.
Source:: Amazon AWS