AWS First Steps
LanguageEnglish
New feature

AWS Security Hub now supports resource criticality for prioritization

AWS Security Hub adds resource criticality to exposure prioritization, helping security teams focus on exposures threatening their most business-critical resources. Included with Security Hub Essentials at no extra cost and always on for all customers.

AWS Security Hub now adds resource criticality to prioritization, helping security teams focus on vulnerabilities affecting the most important business resources. Criticality can be set via automated rules and applies to both existing and new resources. It automatically estimates criticality from resource tags or names, requiring no configuration and logging which source determined the value. Criticality appears as a column on resource pages for sorting, filtering, and grouping, and also shows in vulnerability findings on the impact assessment tab. Included with Security Hub Essentials at no extra cost, it is always enabled for all customers.

Why it matters

Helps security teams prioritize vulnerabilities based on resource criticality

Regions: Listed in the official documentation

Read the original AWS announcement

Related articles and terms

Security Posture Management - Building a Unified Security Monitoring Foundation with AWS Security HubLearn about unified security monitoring with AWS Security Hub and automated threat detection through GuardDuty integration. This guide covers visualizing compliance with security best practices and security governance for multi-account environments.AWS Security HubCentrally manage your AWS security posture and automatically check compliance with best practicesCentralized Security Posture Management with AWS Security Hub - Aggregating Findings and Automated ResponseAggregate findings from GuardDuty, Inspector, and Macie using ASFF, quantify your security score through automated security standard evaluations, and set up automated remediation via EventBridge.Vulnerability Assessment and Threat Detection - Continuous Security Monitoring with Amazon Inspector and GuardDutyLearn how to design and operate vulnerability assessment and threat detection using Amazon Inspector and Amazon GuardDuty.Amazon InspectorA security assessment service that automatically and continuously scans EC2 instances, Lambda functions, and container images for vulnerabilities