Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/integrations/product-list/product-list-a-l.md
Original file line number Diff line number Diff line change
Expand Up @@ -115,7 +115,7 @@ For descriptions of the different types of integrations Sumo Logic offers, see [
| <img src={useBaseUrl('img/integrations/amazon-aws/networkLoadBalancer.png')} alt="Thumbnail icon" width="50"/> | [AWS Network Load Balancer](https://aws.amazon.com/elasticloadbalancing/network-load-balancer/) | App: [AWS Network Load Balancer](/docs/integrations/amazon-aws/network-load-balancer/) |
| <img src={useBaseUrl('img/integrations/amazon-aws/aws-opsworks-logo.png')} alt="Thumbnail icon" width="50"/> | [AWS OpsWorks](https://aws.amazon.com/opsworks/) | Collector: [Deploy Sumo Logic Collectors on AWS OpsWorks](/docs/send-data/collect-from-other-data-sources/deploy-collectors-aws-opsworks/) |
| <img src={useBaseUrl('img/integrations/amazon-aws/aws-private-certificate-authority-logo.png')} alt="Thumbnail icon" width="50"/> | [AWS Private Certificate Authority](https://aws.amazon.com/private-ca/) | App: [AWS Private Certificate Authority](/docs/integrations/amazon-aws/aws-private-certificate-authority/) <br/>Automation integration: [AWS Private Certificate Authority](/docs/platform-services/automation-service/app-central/integrations/aws-private-certificate-authority/) |
| <img src={useBaseUrl('img/integrations/amazon-aws/security-qs.png')} alt="Thumbnail icon" width="50"/> | [AWS Security Hub](https://aws.amazon.com/security-hub/) | Apps:<br/>- [AWS Security Hub CSPM](/docs/integrations/amazon-aws/security-hub/) <br/>- [AWS Security Hub Cloud Security Monitoring and Analytics](/docs/integrations/cloud-security-monitoring-analytics/aws-security-hub/) <br/>- [AWS Security Hub - OCSF](/docs/integrations/cloud-security-monitoring-analytics/aws-security-hub-ocsf/) <br/>- [AWS Security Quick Start](/docs/integrations/amazon-aws/security-quickstart/) <br/>Automation integration: [AWS Security Hub](/docs/platform-services/automation-service/app-central/integrations/aws-security-hub/) <br/>Cloud SIEM integration: [Amazon AWS - Security Hub](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/products/d0aebc1c-db4d-440f-b69f-70dae24befff.md) |
| <img src={useBaseUrl('img/integrations/amazon-aws/security-qs.png')} alt="Thumbnail icon" width="50"/> | [AWS Security Hub](https://aws.amazon.com/security-hub/) | Apps:<br/>- [AWS Security Hub CSPM](/docs/integrations/amazon-aws/security-hub/) <br/>- [AWS Security Hub Cloud Security Monitoring and Analytics](/docs/integrations/cloud-security-monitoring-analytics/aws-security-hub/) <br/>- [AWS Security Hub - OCSF](/docs/integrations/cloud-security-monitoring-analytics/aws-security-hub-ocsf/) <br/>- [AWS Security Quick Start](/docs/integrations/amazon-aws/security-quickstart/) <br/>Automation integrations: <br/>- [AWS Security Hub](/docs/platform-services/automation-service/app-central/integrations/aws-security-hub/) <br/>- [AWS Security Hub V2](/docs/platform-services/automation-service/app-central/integrations/aws-security-hub-v2/)<br/>Cloud SIEM integration: [Amazon AWS - Security Hub](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/products/d0aebc1c-db4d-440f-b69f-70dae24befff.md) |
| <img src={useBaseUrl('img/integrations/misc/aws-simple-notification-service-logo.png')} alt="Thumbnail icon" width="50"/> | [AWS Simple Notification Service](https://aws.amazon.com/sns/) | Automation integration: [AWS Simple Notification Service](/docs/platform-services/automation-service/app-central/integrations/aws-simple-notification-service/) |
| <img src={useBaseUrl('img/integrations/amazon-aws/waf.png')} alt="Thumbnail icon" width="50"/> | [AWS WAF](https://aws.amazon.com/waf/) | Apps: <br/>- [AWS WAF](/docs/integrations/amazon-aws/waf/)<br/>- [AWS WAF Cloud Security Monitoring and Analytics](/docs/integrations/cloud-security-monitoring-analytics/aws-waf/) <br/>Automation integration: [AWS WAF](/docs/platform-services/automation-service/app-central/integrations/aws-waf/) <br/>Cloud SIEM integration: [Amazon AWS - Web Application Firewall (WAF)](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/products/072b85a2-1765-45c2-911d-b0509880326e.md) |
| <img src={useBaseUrl('img/platform-services/automation-service/app-central/logos/axonius.png')} alt="Thumbnail icon" width="100"/> | [Axonius](https://www.axonius.com/) | Automation integration: [Axonius](/docs/platform-services/automation-service/app-central/integrations/axonius/) |
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,71 @@
---
title: AWS Security Hub V2
description: ''
---

import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/aws.png')} alt="aws" width="50"/>

***Version: 1.0
Updated: Dec 11, 2025***

Interact with AWS Security Hub V2 through Insights and Findings.

## Actions

* **Import Single Finding** (*Enrichment*) - Import a single finding.
* **Create Insight** (*Containment*) - Create a new insight with the specified information.
* **Delete Insight** (*Containment*) - Delete the specified insight.
* **Get Findings** (*Enrichment*) - Get findings matching the specified query.
* **Get Insight Results** (*Enrichment*) - Get results for the specified insight.
* **Get Insights** (*Enrichment*) - Get insights matching the specified query.
* **List Enabled Products** (*Enrichment*) - Get a list of SecurityHub enabled products.
* **Update Finding** (*Containment*) - Update a finding with the specified information.
* **Update Insight** (*Containment*) - Update the specified insight.

## Configure AWS Security Hub in Automation Service and Cloud SOAR

import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md';
import AWSRegions from '../../../../reuse/automation-service/aws/region.md';
import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md';
import AWSSecret from '../../../../reuse/automation-service/aws/secret.md';
import AWSIAMRole from '../../../../reuse/automation-service/aws/iam-role.md';
import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md';
import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md';
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';
import IAMConfiguration from '../../../../reuse/automation-service/aws/iam-configuration.md';

<IntegrationsAuth/>

* <IntegrationLabel/>
* **Host**. Enter your [Security Hub URL](https://docs.aws.amazon.com/general/latest/gr/sechub.html), for example, `securityhub.us-east-1.amazonaws.com`.
* <AWSRegions/>
* **Service Name**. Enter `securityhub`.
* <AWSAccesskey/>
* <AWSSecret/>
* <AWSIAMRole/>
* <IntegrationTimeout/>
* <IntegrationEngine/>
* <IntegrationProxy/>

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/aws/aws-security-hub-v2-configuration.png')} style={{border:'1px solid gray'}} alt="AWS Security Hub configuration" width="400"/>

<IntegrationsAuthAWS/>

For information about AWS Security Hub, see [AWS Security Hub documentation](https://docs.aws.amazon.com/securityhub/).

### AWS IAM role-based access

<IAMConfiguration/>

## Limitations

Local [Automation Bridge](/docs/platform-services/automation-service/automation-service-bridge/) is not supported in this version.

## Change Log

* December 11, 2025 - First upload
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.