🔐AWS Security Hub
Add Security Hub
To integrate AWS Security Hub into Regulait, on the Available Integrations page, click on the Security Hub icon (marked with an arrow below).
In the "Add Integration" window below, we must provide the AWS Access Key and Secret Key.
Before obtaining these keys, we need to ensure that our Security Hub users in the AWS system have Read-Only Permissions.
These permissions are crucial for the Regulait system to gather information from the Integration App.
Regulait only requires Read-Only access, as it retrieves data solely for compliance purposes, without making any changes, deletions, or additions to the Security Hub system.
The AWS System
Below we see the AWS Console home page, we'll click on the IAM (Identity and Access Management) button (marked with an arrow below) to access User Groups and Permissions.
If, for some reason, you do not see an IAM button on the main Console page, search for "IAM" in the site's search bar.
Here, on the User Groups tab, we'll create a Group, give that Group the Read-Only Permission for Security Hub, and any User added to the Group will automatically get these Permissions.
Start by clicking the Create Group button (marked with an arrow below).
Add Permissions to a User Group
On the Create Group page, after naming the Group and adding Users to it, select the Security Hub Read Only Access permission policy (marked with an arrow below).
After selecting the right Permission, click on the Create Group button (circled below).
Get the Access and Secret Keys
We've made sure that our Users have the Read-Only permissions for Security Hub.
Now we'll click on our Admin name to open the drop-down options menu (marked with an arrow below).
On this menu, circled below, select Security Credentials.
Under 'Access Keys', click the 'Create Access Key' button (marked with an arrow below).
Adding the Integration in Regulait's System
Back on Regulait's Add Integration window, fill in a custom Integration name, and the created Keys.
Vendor Management for an Integration
Now select the proper Vendor that provides the Security Hub service.
To learn more about Vendor Management - click here.
If we don't have an appropriate Vendor, we can also create a Vendor here on the Add Integration window, and click on the Create Vendor button (marked with an arrow below).
After filling out all Mandatory fields, click on the Add Integration button (marked with an arrow below).
On the Installed Integration page, we can view our Installed Integrations, in the Image below, we can see one Security Hub Integration installed.
To learn more about using and managing Integrations, continue to the Using Integrations guide chapter.
To return to the Integrations Guide hub, click here.
To return to the main guide hub, click here.
Last updated