Amazon AWS Security Hub

introduction this guide tells you how to authenticate the amazon aws security hub connector in swimlane using aws credentials you will create an iam user or iam role with the required security hub permissions, collect the required aws credentials, and configure the connector in swimlane prerequisites aws access requirements you must have permissions to access the aws management console create and manage iam users or iam roles generate access keys view aws security hub findings and insights assume iam roles (if using role arn authentication) required credentials during setup, you will collect aws access key id aws secret access key aws region iam role arn aws setup take the following steps to create an iam user sign in to the aws management console navigate to iam select users click create user enter a user name click next under permissions , attach a policy that grants access to aws security hub complete the user creation wizard take the following steps to create an access key open the newly created iam user select the security credentials tab scroll to access keys click create access key select the appropriate use case click create access key copy and securely save access key id secret access key these values are required when configuring the swimlane connector take the following steps to create an iam role (optional but recommended) navigate to iam > roles click create role select the trusted entity according to your environment attach a policy that grants access to aws security hub enter a role name click create role open the role and copy the role arn example arn\ aws\ iam 123456789012\ role/swimlanesecurityhubrole take the following steps to determine the aws region sign in to the aws management console select the region from the region selector in the upper right corner examples include us east 1 us west 2 eu west 1 ap southeast 2 use the region where aws security hub is enabled required iam permissions the iam user or iam role should have permission to perform security hub operations typical permissions include securityhub\ getfindings securityhub\ getinsights securityhub\ batchget securityhub\ describe if using an iam role, the iam user must also have sts\ assumerole grant only the permissions required by your organization connector configuration in swimlane log in to turbine from the left hand navigation pane, click orchestration and click assets asset homepage opens click the plus icon to open the configure your connector asset window select amazon aws security hub from the asset type list fill in the asset settings and asset input as shown field description required/optional aws access key id aws access key id required aws secret access key aws secret access key required region name aws region where security hub is enabled required role arn iam role arn required verify ssl enable/disable ssl verification optional http proxy optional proxy configuration optional fields with marks are required click create troubleshooting authentication failed verify that the access key id is correct the secret access key is correct the access keys are active access denied verify that the iam user or role has permission to access aws security hub the iam policy includes the required security hub actions the iam user can assume the specified iam role unable to assume role verify that the role arn is correct the iam role trust policy allows your iam user or application to assume the role the iam user has the sts\ assumerole permission no findings returned verify that security hub is enabled in the selected aws region findings exist in the selected region the configured iam credentials have permission to view findings ssl errors if ssl verification fails verify that the aws endpoint uses a trusted ssl certificate confirm that any proxy is not intercepting ssl traffic disable verify ssl only for testing if permitted by your organization's security policy result you have successfully authenticated the amazon aws security hub connector in swimlane sources aws security hub user guide https //docs aws amazon com/securityhub/latest/userguide/what is securityhub html https //docs aws amazon com/securityhub/latest/userguide/what is securityhub html aws security hub api reference https //docs aws amazon com/securityhub/latest/apireference/welcome html aws iam user guide – creating iam users https //docs aws amazon com/iam/latest/userguide/id users create html https //docs aws amazon com/iam/latest/userguide/id users create html?utm source=chatgpt com aws iam user guide – managing access keys https //docs aws amazon com/iam/latest/userguide/id credentials access keys html https //docs aws amazon com/iam/latest/userguide/id credentials access keys html?utm source=chatgpt com aws iam roles documentation https //docs aws amazon com/iam/latest/userguide/id roles html https //docs aws amazon com/iam/latest/userguide/id roles html?utm source=chatgpt com