Amazon Web Services → Microsoft Azure
Azure equivalent of AWS Security Hub
AWS Security Hub CSPM (the control checks formerly called Security Hub) maps to Defender for Cloud's free Foundational CSPM and the paid Defender CSPM plan.
About AWS Security Hub
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | Unified cloud security service that correlates findings from Security Hub CSPM, GuardDuty, Inspector, and Macie into prioritized exposures, with OCSF findings and response automation. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| Cloud security posture management (CSPM) | Defender for Cloud CSPM (Foundational and Defender CSPM) | Direct match |
Threat detection, posture & security operations(1)
Cloud security posture management (CSPM) Direct match
AWS Security Hub CSPM (the control checks formerly called Security Hub) maps to Defender for Cloud's free Foundational CSPM and the paid Defender CSPM plan. The newer AWS Security Hub, which correlates findings into exposures, maps to Defender CSPM's attack path analysis and risk prioritization.
- Standards. Security Hub CSPM runs checks for AWS Foundational Security Best Practices, CIS, PCI DSS, and NIST. Foundational CSPM uses the Microsoft Cloud Security Benchmark and secure score, and Defender CSPM adds regulatory standards, attack paths, the cloud security explorer, and agentless scanning.
- Naming. AWS renamed the original service Security Hub CSPM when it launched the new unified Security Hub. Older study material uses "Security Hub" for the control checks.