Amazon Security Hub pricing

Amazon Security Hub is priced along two dimensions. The dimensions are based on the quantity of security checks and the quantity of finding ingestion events.

Security checks: Amazon Web Services Security provides customers with prepackaged security standards, such as the Center for Internet Security (CIS) Amazon Web Services Foundations Benchmark and the Payment Card Industry Data Security Standard (PCI DSS). Security Hub automatically evaluates each control in a security standard via rules. The evaluation of a control (using a rule) against a single Amazon Web Services resource is referred to as a security check and it results in a finding that shows the result of the check. Security checks are charged per number of checks per account per region.

Amazon Security Hub’s security checks leverage configuration items recorded by Amazon Config. Amazon Config is required for these security checks, and configuration items are priced separately from Security Hub. Security Hub customers are not charged separately for any Config rules enabled by Security Hub. The Config rules enabled by Security Hub are referred to as service-linked rules.

Finding ingestion events: Amazon Security Hub ingests findings from various Amazon Web Services services and from partner products. Finding ingestion events include both ingesting new findings and ingesting updates to existing findings. Finding ingestion events associated with Security Hub's security checks are not charged. Finding ingestion events are charged per number of events per account per region.

Automation rules evaluations: Amazon Security Hub automation rules allow you to automatically update or suppress findings in near-real time. You can automatically update various fields in findings, suppress findings, update finding severity and workflow status, add notes, and more. You can set criteria such as finding title or severity to make sure rules act only on relevant findings. This optional feature is priced by the quantity of automation rule evaluations per month.

Free Trial: In the Amazon Web Services China Region, you can try Amazon Security Hub at no additional charge with a 30-day free trial. The free trial enables you to get the full Security Hub feature set and security checks over the 30-day period. The free trial will provide you an estimate of your monthly bill. Start a free trial of Amazon Security Hub.