AWS Security Hub Event Collector

An XSIAM event collector integration for AWS Security Hub.

Category

Analytics & SIEM

Pack

AWS-SecurityHub

Configuration parameters

• default_region — AWS Default Region (required)
• role_arn — Role Arn
• credentials — Access Key
• first_fetch — First fetch time (<number> <time unit>, e.g., 12 hours, 7 days, 3 months, 1 year)
• role_session_name — Role Session Name
• role_session_duration — Role Session Duration
• max_fetch — Max events per fetch
• timeout — Timeout
• retries — Retries
• sts_regional_endpoint — AWS STS Regional Endpoints
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (1)

• aws-securityhub-get-events — Fetch events from AWS Security Hub.