Amazon Web Services → Microsoft Azure
Azure equivalent of AWS Security Hub CSPM
AWS Security Hub CSPM (the control checks formerly called Security Hub) maps to Defender for Cloud's free Foundational CSPM and the paid Defender CSPM plan.
About AWS Security Hub CSPM
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | Cloud security posture management with automated control checks against standards such as AWS Foundational Security Best Practices, CIS, PCI DSS, and NIST (formerly just called Security Hub). |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| Cloud security posture management (CSPM) | Defender for Cloud CSPM (Foundational and Defender CSPM) | Direct match |
Threat detection, posture & security operations(1)
Cloud security posture management (CSPM) Direct match
AWS Security Hub CSPM (the control checks formerly called Security Hub) maps to Defender for Cloud's free Foundational CSPM and the paid Defender CSPM plan. The newer AWS Security Hub, which correlates findings into exposures, maps to Defender CSPM's attack path analysis and risk prioritization.
- Standards. Security Hub CSPM runs checks for AWS Foundational Security Best Practices, CIS, PCI DSS, and NIST. Foundational CSPM uses the Microsoft Cloud Security Benchmark and secure score, and Defender CSPM adds regulatory standards, attack paths, the cloud security explorer, and agentless scanning.
- Naming. AWS renamed the original service Security Hub CSPM when it launched the new unified Security Hub. Older study material uses "Security Hub" for the control checks.