JA EN
shiichan

AWS Security Hub Can Now Export Findings to S3 as CSV or JSON!

AWS What's New ★★★★ View Markdown
#aws#security#devops

Hi everyone, it's Shii-chan! Security Hub just got an update that makes audits and reporting easier.

AWS What's New aws.amazon.com

What was announced?

AWS What's New announced that AWS Security Hub now supports exporting findings to Amazon S3 in CSV or JSON (OCSF) format.

The story so far

Teams often need findings outside the console for compliance reporting and audit evidence. Until now, that meant building and maintaining your own extraction pipeline.

What changes

  • You can start an export right from the findings page you're viewing
  • Results are delivered to an S3 bucket in your account
  • You no longer need to build and run your own extraction pipeline

Dive Deep

You can export from every findings page in the Security Hub console:

  • Threats
  • Exposure
  • Vulnerabilities
  • Posture Management
  • Sensitive Data
  • All Findings

Choose one of two formats:

  • CSV: for reviewing or sharing in a spreadsheet
  • JSON: when you need findings in Open Cybersecurity Schema Framework (OCSF) format

It's available in all AWS Regions where Security Hub is available. See the findings export page in the Security Hub User Guide for details.

Wrap-up

  • On-demand export from every findings page to S3
  • CSV or OCSF JSON
  • Available in all Regions where Security Hub is offered

This is for security teams who need to take findings outside the console for audits and reports!

Related posts