AWS First Steps
LanguageEnglish
New feature

AWS Security Hub introduces remediation plans to prioritize and fix security exposures

AWS Security Hub now groups related exposure findings by root cause, allowing you to fix a single underlying resource to resolve or reduce multiple exposures at once, with prioritized guidance and multi-format instructions.

Aws security hub provides remediation plans that group related vulnerability findings by root cause, allowing users to resolve or mitigate multiple vulnerabilities at once by fixing a single underlying resource, such as misconfigurations or overly permissive policies. Each plan includes a priority level (critical, high, medium, low), impact assessment, and detailed step-by-step instructions in multiple formats, including aws cli, terraform, cloudformation, python, and cdk. Security hub automatically prioritizes plans that reduce risk the most, enabling focus on critical remediation activities. Ai agents can programmatically consume remediation plans via api to automate security fixes across the entire environment. Remediation plans are available in all aws regions where aws security hub is offered, at no additional cost under the aws security hub essentials plan.

Why it matters

Security teams can now efficiently improve security by fixing root causes rather than addressing each vulnerability individually.

Read the original AWS announcement

Related articles and terms

AWS Security HubA service that provides centralized visibility into the security posture of your entire AWS environment, performing automated assessments against industry-standard security benchmarks and aggregating findings.Security Posture Management - Building a Unified Security Monitoring Foundation with AWS Security HubLearn about unified security monitoring with AWS Security Hub and automated threat detection through GuardDuty integration. This guide covers visualizing compliance with security best practices and security governance for multi-account environments.Centralized Security Posture Management with AWS Security Hub - Aggregating Findings and Automated ResponseAggregate findings from GuardDuty, Inspector, and Macie using ASFF, quantify your security score through automated security standard evaluations, and set up automated remediation via EventBridge.Continuous Compliance Monitoring with AWS Config - Rule Evaluation and Auto-RemediationLearn how to record resource configurations with AWS Config, evaluate compliance using Config rules, and set up auto-remediation actions.Vulnerability Assessment and Threat Detection - Continuous Security Monitoring with Amazon Inspector and GuardDutyLearn how to design and operate vulnerability assessment and threat detection using Amazon Inspector and Amazon GuardDuty.