# Ensure Security Hub is Enabled

- Source: https://support.icompaas.com/support/solutions/articles/62000218852-ensure-security-hub-is-enabled
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Security Controls](https://support.icompaas.com/support/solutions/62000065178) › [AWS Services](https://support.icompaas.com/support/solutions/folders/62000097507)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**: 

AWS Security Hub gives you a comprehensive view of your high-priority security alerts and compliance status across AWS accounts. There is a range of powerful security tools at your disposal, from firewalls and endpoint protection to vulnerability and compliance scanners. But oftentimes this leaves your team switching back-and-forth between these tools to deal with hundreds, and sometimes thousands, of security alerts every day. With Security Hub, you now have a single place that aggregates, organizes, and prioritizes your security alerts, or findings, from multiple AWS services, such as Amazon GuardDuty, Amazon Inspector, and Amazon Macie, as well as from AWS Partner solutions. Your findings are visually summarized on integrated dashboards with actionable graphs and tables. You can also continuously monitor your environment using automated compliance checks based on the AWS best practices and industry standards your organization follows. Get started with AWS Security Hub in just a few clicks in the Management Console and once enabled, Security Hub will begin aggregating and prioritizing findings.

**Rationale**: 

AWS Security Hub provides you with a comprehensive view of your security state in AWS and helps you check your environment against security industry standards and best practices.

Security Hub collects security data from across AWS accounts, services, and supported third-party partner products and helps you analyze your security trends and identify the highest priority security issues.

**Impact**:

-   Reduced effort to collect and prioritize findings
    
-   Automatic security checks against best practices and standards
    
-   Consolidated view of findings across accounts and providers
    
-   Ability to automate remediation of findings
    

  

### Default Value:

By default, the security Hub is disabled.

  

#### Pre-requisites:

-   Sign in as Admin or IAM user with required permissions
    

  

  

**Remediation:**

  

### Test Plan:

1.  Login to AWS Management console
    
2.  Go to Security Hud service at [https://ap-south-1.console.aws.amazon.com/securityhub](https://ap-south-1.console.aws.amazon.com/securityhub "https://ap-south-1.console.aws.amazon.com/securityhub")
    
3.  If it shows **Go to Security Hub**, it means Security Hub is not setted up yet  
    ![](https://support.icompaas.com/assets/kb/7f18c8aab5dd265f.png)
    

  

  

#### Implementation Steps:

1.  Login to AWS Management console
    
2.  Go to Security Hud service at [https://ap-south-1.console.aws.amazon.com/securityhub](https://ap-south-1.console.aws.amazon.com/securityhub "https://ap-south-1.console.aws.amazon.com/securityhub")
    
3.  Click on **Go to Security Hub**  
    **![](https://support.icompaas.com/assets/kb/851f4bac863c0338.png)**
    
4.  **Choose the Security Standard you want as per the organizations security policies**  
    **![](https://support.icompaas.com/assets/kb/c5b82110b9afb460.png)**You can enable or disable a standard or its individual controls at any time.
    
5.  Click on **Enable Security Hub**
    

  

  

#### Using AWS CLI:

aws securityhub enable-security-hub --enable-default-standards --tags '{"Department": "Security"}'

Note: Use tags as required

  

#### Backout plan:

1.  Login to AWS Management console
    
2.  Go to Security Hud service at [https://ap-south-1.console.aws.amazon.com/securityhub](https://ap-south-1.console.aws.amazon.com/securityhub "https://ap-south-1.console.aws.amazon.com/securityhub")
    
3.  Click on **Settings** in the left navigation pane  
    ![](https://support.icompaas.com/assets/kb/71f7f8ef03328e5c.png)
    
4.  Select the **General** tab and at the bottom click on **Disable AWS Security Hub**  
    **![](https://support.icompaas.com/assets/kb/637138cc1fa2d48e.png)**
    

  

### Reference:

[![](https://support.icompaas.com/assets/kb/e205135a4aed9623.png)](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html)[What is AWS Security Hub? - AWS Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.