AWS Security Hub CSPM in AWS European Sovereign Cloud
This topic describes the functionality of AWS Security Hub CSPM in the AWS European Sovereign Cloud Region.
AWS Security Hub CSPM provides you with a comprehensive view of the security state of your AWS resources. Security Hub collects security data from across AWS accounts and services, and helps you analyze your security trends to identify and prioritize the security issues across your AWS environment.
How AWS Security Hub differs
The following differences apply to AWS Security Hub CSPM:
-
The preview release of the new Security Hub CSPM is not available. This includes the console and all operations and features that apply exclusively to its correlation, contextualization, and other capabilities.
-
When working with the Summary dashboard on the Security Hub CSPM console, the Software vulnerabilities with exploits widget is not available.
-
The AWS Resource Tagging standard and the controls that apply exclusively to this standard are not available.
-
Some Security Hub CSPM controls are not available in the AWS European Sovereign Cloud. On the Security Hub CSPM console, a control does not appear in the list of controls if it is not available in the Region that you are currently signed in to. To programmatically determine whether a control is available in the current Region, you can use the ListSecurityControlDefinitions operation of the Security Hub CSPM API. To review a list of the Security Hub CSPM controls that are available in the AWS European Sovereign Cloud, expand the following section. For detailed information about a control, see the Security Hub CSPM control reference.
Example
The following Security Hub CSPM controls are available in the AWS European Sovereign Cloud:
-
AutoScaling.2
-
AutoScaling.6
-
CloudTrail.1
-
CloudTrail.2
-
CloudTrail.3
-
CloudTrail.4
-
CloudTrail.5
-
CloudWatch.1
-
CloudWatch.2
-
CloudWatch.3
-
CloudWatch.4
-
CloudWatch.5
-
CloudWatch.6
-
CloudWatch.7
-
CloudWatch.8
-
CloudWatch.9
-
CloudWatch.10
-
CloudWatch.11
-
CloudWatch.12
-
CloudWatch.13
-
CloudWatch.14
-
CloudWatch.15
-
CloudWatch.16
-
CloudWatch.17
-
Config.1
-
DataFirehose.1
-
DocumentDB.2
-
DocumentDB.3
-
DocumentDB.4
-
DocumentDB.5
-
DocumentDB.6
-
DynamoDB.1
-
DynamoDB.2
-
DynamoDB.6
-
EC2.1
-
EC2.2
-
EC2.3
-
EC2.4
-
EC2.6
-
EC2.7
-
EC2.8
-
EC2.9
-
EC2.10
-
EC2.12
-
EC2.13
-
EC2.14
-
EC2.15
-
EC2.16
-
EC2.17
-
EC2.18
-
EC2.20
-
EC2.21
-
EC2.53
-
EC2.54
-
EC2.55
-
EC2.56
-
EC2.57
-
EC2.58
-
EC2.60
-
EC2.171
-
EC2.180
-
EC2.183
-
ECR.1
-
ECS.3
-
ECS.4
-
ECS.5
-
ECS.8
-
ECS.9
-
ECS.10
-
ECS.12
-
ECS.17
-
ECS.18
-
ECS.20
-
ECS.21
-
EFS.6
-
ElastiCache.2
-
ELB.1
-
ELB.4
-
ELB.5
-
ELB.6
-
ELB.9
-
ELB.10
-
ELB.12
-
ELB.13
-
ELB.14
-
EMR.2
-
FSx.1
-
FSx.3
-
FSx.4
-
FSx.5
-
GuardDuty.5
-
GuardDuty.6
-
GuardDuty.8
-
GuardDuty.10
-
GuardDuty.11
-
GuardDuty.12
-
IAM.20
-
IAM.28
-
KMS.4
-
KMS.5
-
Lambda.1
-
Lambda.2
-
Lambda.3
-
Lambda.5
-
Lambda.7
-
Neptune.1
-
Neptune.2
-
Neptune.4
-
Neptune.6
-
Neptune.7
-
Neptune.8
-
NetworkFirewall.1
-
NetworkFirewall.3
-
NetworkFirewall.4
-
NetworkFirewall.5
-
NetworkFirewall.6
-
NetworkFirewall.9
-
NetworkFirewall.10
-
PCA.1
-
RDS.1
-
RDS.2
-
RDS.3
-
RDS.4
-
RDS.5
-
RDS.6
-
RDS.7
-
RDS.8
-
RDS.9
-
RDS.10
-
RDS.11
-
RDS.12
-
RDS.13
-
RDS.15
-
RDS.24
-
RDS.34
-
RDS.36
-
RDS.37
-
RDS.39
-
RDS.41
-
RDS.42
-
RDS.43
-
RDS.44
-
RDS.46
-
Redshift.8
-
Redshift.15
-
Redshift.18
-
S3.1
-
S3.2
-
S3.3
-
S3.5
-
S3.6
-
S3.8
-
S3.9
-
S3.10
-
S3.11
-
S3.12
-
S3.13
-
S3.14
-
S3.15
-
S3.22
-
S3.23
-
SNS.1
-
SNS.4
-
SSM.6
-
SSM.7
-
Transfer.2
-
WAF.10
-
WAF.12
Documentation
-
AWS Security Hub CSPM documentation
-
AWS Developer Tools in AWS European Sovereign Cloud
-
Service endpoints for AWS European Sovereign Cloud