AWS Security Hub Can Now Watch Over Azure Too!

Hi everyone, it's Shii-chan! Today I found something that multi-cloud folks are going to love. AWS Security Hub can now keep an eye on your Microsoft Azure resources, not just your AWS ones!

AWS What's New aws.amazon.com

What was announced?

This one comes from the AWS What's New feed. AWS Security Hub now monitors Microsoft Azure resources, extending risk analytics, cloud security posture management (CSPM), vulnerability management, and security response management across both AWS and Azure.

Security Hub automatically discovers your Azure resources and evaluates them for misconfigurations, internet exposure, and software vulnerabilities.

The story so far

Lots of customers run workloads in both AWS and Azure, but until now they had to operate separate security tools for each environment.

That made it hard to prioritize risks holistically, and responses could end up inconsistent. Switching back and forth between consoles isn't much fun either.

What changes

From now on, Security Hub can detect and respond to risks across your AWS and Azure environments from a single view.

AWS and Azure findings show up in the same prioritized view, with the same finding formats. The automation workflows are shared too, so your security team can work from one console instead of switching between tools.

Dive Deep

Here are the Azure resources Security Hub discovers automatically:

• Azure Virtual Machines (VMs)
• Azure Container Registry (ACR) container images
• Azure Function Apps
• Azure identities

Posture checks run against security standards like the CIS Benchmarks™ for Microsoft Azure Foundations. You also get a unified resource inventory plus risk and exposure analysis.

For automated response, you can reuse your existing EventBridge integrations, so there's no new mechanism to learn.

On pricing, there's an independent 30-day free trial for Azure monitoring that starts once you create your integration with Microsoft Azure. After the trial, you pay the same price to monitor Azure resources as you do for equivalent AWS resources.

It's available in almost every region where Security Hub runs, except Middle East (UAE), Middle East (Bahrain), Asia Pacific (Taipei), and Asia Pacific (New Zealand).

Wrap-up

• AWS Security Hub now supports monitoring Microsoft Azure resources
• It auto-discovers Azure VMs, ACR images, Function Apps, and identities, checking for misconfigurations, exposure, and vulnerabilities
• Posture checks include the CIS Benchmarks for Microsoft Azure Foundations
• AWS and Azure findings appear in the same view and format, and your EventBridge automation carries over
• Comes with a 30-day free trial for Azure monitoring; available in every Security Hub region except the Middle East (UAE / Bahrain) and Asia Pacific (Taipei / New Zealand)

If your team runs both AWS and Azure and has been juggling separate security consoles, this update is a great fit for you!