AWS Security Hub Event Collector

An XSIAM event collector integration for AWS Security Hub.

Analytics & SIEM · AWS - Security Hub

Configuration parameters

  • default_region — AWS Default Region (required)
  • role_arn — Role Arn
  • credentials — Access Key
  • first_fetch — First fetch time (<number> <time unit>, e.g., 12 hours, 7 days, 3 months, 1 year)
  • role_session_name — Role Session Name
  • role_session_duration — Role Session Duration
  • max_fetch — Max events per fetch
  • timeout — Timeout
  • retries — Retries
  • sts_regional_endpoint — AWS STS Regional Endpoints
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (1)

  • aws-securityhub-get-events

    Fetch events from AWS Security Hub.