This hands-on lab focuses on AWS Security Hub findings and how you can create an automated response to these findings. The automation will be facilitated by EventBridge and SNS.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Enable AWS Security Hub
- Enable AWS Config first
- Then, enable AWS Security Hub
- Create an SNS Topic
Create an SNS topic for Security Hub findings
- Subscribe via email to the created topic
- Navigate to your email and confirm the subscription (You will receive a confirmation email.)
- Create an EventBridge Rule
- Link to an EventBridge event
- Link to the previously created SNS topic
- Create Resources to Generate Findings
Create an EC2 security group
- Make sure the ingress on port 22 is set to
0.0.0.0/0
- Make sure the ingress on port 22 is set to
- Verify Automation
Navigate to your email and ensure receipt of Security Hub findings
