AWS First Steps
LanguageEnglish
New feature

AWS Security Hub now exports findings to S3 in CSV or JSON format

AWS Security Hub now supports exporting findings to Amazon S3 in CSV or JSON (OCSF) format, enabling compliance reporting and audit evidence without custom pipelines.

AWS Security Hub now allows exporting findings to Amazon S3 as CSV or JSON (OCSF). Security teams can export findings on-demand from any Security Hub console page (threats, exposures, vulnerabilities, posture management, sensitive data, all findings, etc.) to their account's S3 bucket without maintaining export pipelines. Users may choose CSV for spreadsheet review or sharing, or JSON in Open Cybersecurity Schema Framework (OCSF) format when needed. This feature is available in all AWS regions where AWS Security Hub is offered. For details, see the AWS Security Hub user guide.

Why it matters

This feature helps security teams utilize findings for compliance reporting and audit evidence.

Regions: Same as AWS Security Hub

Read the original AWS announcement

Related articles and terms

AWS Security HubA service that provides centralized visibility into the security posture of your entire AWS environment, performing automated assessments against industry-standard security benchmarks and aggregating findings.Security Posture Management - Building a Unified Security Monitoring Foundation with AWS Security HubLearn about unified security monitoring with AWS Security Hub and automated threat detection through GuardDuty integration. This guide covers visualizing compliance with security best practices and security governance for multi-account environments.Centralized Security Posture Management with AWS Security Hub - Aggregating Findings and Automated ResponseAggregate findings from GuardDuty, Inspector, and Macie using ASFF, quantify your security score through automated security standard evaluations, and set up automated remediation via EventBridge.Amazon Security LakeA service that automatically normalizes security data from CloudTrail, VPC Flow Logs, Route 53 Resolver logs, and other sources into OCSF format, centralizing it in an S3-based security data lakeBuilding a Security Data Lake with Amazon Security Lake - Unified Analysis in OCSF FormatLearn about Security Lake's automatic aggregation of CloudTrail, VPC Flow Logs, and Route 53 logs, OCSF normalization, and integration with subscribers.