--- title: Amazon AWS Security Hub slug: authentication-guides/amazon-aws-security-hub docTags: createdAt: 2026-07-27T12:22:13.265Z --- ## Introduction This guide tells you how to authenticate the **Amazon AWS Security Hub** connector in Swimlane using **AWS Credentials**. You will create an IAM user or IAM role with the required Security Hub permissions, collect the required AWS credentials, and configure the connector in Swimlane. # Prerequisites ## AWS Access Requirements You must have permissions to: - Access the AWS Management Console. - Create and manage IAM users or IAM roles. - Generate Access Keys. - View AWS Security Hub findings and insights. - Assume IAM roles (if using Role ARN authentication). # Required Credentials During setup, you will collect: - AWS Access Key ID - AWS Secret Access Key - AWS Region - IAM Role ARN # AWS Setup Take the following steps to create an IAM User: 1. Sign in to the **AWS Management Console**. 2. Navigate to **IAM**. 3. Select **Users**. 4. Click **Create user**. 5. Enter a user name. 6. Click **Next**. 7. Under **Permissions**, attach a policy that grants access to **AWS Security Hub**. 8. Complete the user creation wizard. Take the following steps to create an Access Key: 1. Open the newly created IAM user. 2. Select the **Security credentials** tab. 3. Scroll to **Access keys**. 4. Click **Create access key**. 5. Select the appropriate use case. 6. Click **Create access key**. 7. Copy and securely save: - **Access Key ID** - **Secret Access Key** These values are required when configuring the Swimlane connector. Take the following steps to create an IAM Role (Optional but Recommended) 1. Navigate to **IAM** > **Roles**. 2. Click **Create role**. 3. Select the trusted entity according to your environment. 4. Attach a policy that grants access to **AWS Security Hub**. 5. Enter a role name. 6. Click **Create role**. 7. Open the role and copy the **Role ARN**. Example: arn\:aws\:iam\::123456789012\:role/SwimlaneSecurityHubRole Take the following steps to determine the AWS Region 1. Sign in to the AWS Management Console. 2. Select the region from the region selector in the upper-right corner. Examples include: - us-east-1 - us-west-2 - eu-west-1 - ap-southeast-2 Use the region where **AWS Security Hub** is enabled. # Required IAM Permissions The IAM user or IAM role should have permission to perform Security Hub operations. Typical permissions include: - securityhub\:GetFindings - securityhub\:GetInsights - securityhub\:BatchGet\* - securityhub\:Describe\* If using an IAM Role, the IAM user must also have: - sts\:AssumeRole Grant only the permissions required by your organization. # Connector Configuration in Swimlane 1. Log in to Turbine. 2. From the left-hand navigation pane, click **ORCHESTRATION** and click **Assets**. 3. Asset homepage opens. 4. Click the plus icon to open the **Configure your Connector Asset** window. 5. Select **Amazon AWS Security Hub** from the Asset type list. 6. Fill in the Asset Settings and Asset Input as shown: | **Field** | **Description** | **Required/Optional** | | ---------------------------- | ---------------------------------------- | --------------------- | | **aws\_access\_key\_id** | AWS Access Key ID | Required | | **aws\_secret\_access\_key** | AWS Secret Access Key | Required | | **region\_name** | AWS Region where Security Hub is enabled | Required | | **role\_arn** | IAM Role ARN | Required | | **verify\_ssl** | Enable/Disable SSL Verification | Optional | | **http\_proxy** | Optional proxy configuration | Optional | Fields with \* marks are required. 7. Click **Create**. ::Image[]{src="https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/TfDOQQBMQq8W3iXWWVyHK_image.png" size="200" isUploading="false" width="800" height="408" darkWidth="800" darkHeight="408" showCaption="false"} # Troubleshooting ## Authentication Failed Verify that: - The Access Key ID is correct. - The Secret Access Key is correct. - The access keys are active. ## Access Denied Verify that: - The IAM user or role has permission to access **AWS Security Hub**. - The IAM policy includes the required Security Hub actions. - The IAM user can assume the specified IAM role. ## Unable to Assume Role Verify that: - The **Role ARN** is correct. - The IAM role trust policy allows your IAM user or application to assume the role. - The IAM user has the sts\:AssumeRole permission. ## No Findings Returned Verify that: - Security Hub is enabled in the selected AWS Region. - Findings exist in the selected region. - The configured IAM credentials have permission to view findings. ## SSL Errors If SSL verification fails: - Verify that the AWS endpoint uses a trusted SSL certificate. - Confirm that any proxy is not intercepting SSL traffic. - Disable **verify\_ssl** only for testing if permitted by your organization's security policy. ### Result You have successfully authenticated the **Amazon AWS Security Hub** connector in Swimlane. ### Sources - AWS Security Hub User Guide [https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html) - AWS Security Hub API Reference https\://docs.aws.amazon.com/securityhub/latest/APIReference/Welcome.html - AWS IAM User Guide – Creating IAM Users [https://docs.aws.amazon.com/IAM/latest/UserGuide/id\_users\_create.html](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_create.html?utm_source=chatgpt.com) - AWS IAM User Guide – Managing Access Keys [https://docs.aws.amazon.com/IAM/latest/UserGuide/id\_credentials\_access-keys.html](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html?utm_source=chatgpt.com) - AWS IAM Roles Documentation [https://docs.aws.amazon.com/IAM/latest/UserGuide/id\_roles.html](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html?utm_source=chatgpt.com)