Amazon Security Hub
Amazon Security Hub is a cloud security posture management service. It performs security best practice checks, aggregates alerts, and enables automated remediation.
For more information about the API, see AWS Security Hub API Reference.
-
For more information about connecting to SaaS applications, see Connecting to SaaS applications.
-
For more information about Lite connectors, see Classifications for SaaS application connectors.
-
Depending on your use case, you might need to install Data Movement gateway to move data from SaaS applications. For more information, see When is Data Movement gateway required?.
Supported update methods
For more information, see An overview of target update methods.
Landing tasks:
-
Change data capture (CDC)
-
Reload and compare
Replication tasks:
-
Change data capture (CDC) using Change Tables
-
Full load
Landing data in a data lake tasks:
-
Change data capture (CDC)
-
Reload
Preparing for authentication
To access your Amazon Security Hub, you need to authenticate the connection with your account credentials.
Creating the connection
For more information, see Connecting to SaaS applications.
- Fill in the required connection properties.
-
Provide a name for the connection in Connection name.
-
Select Open connection metadata to define metadata for the connection when it has been created.
-
Click Create.
| Setting | Description |
|---|---|
| Data gateway |
Select a Data Movement gateway if required by your use case. Information note
This field is not available with the Qlik Talend Cloud Starter subscription, as it does not support Data Movement gateway. If you have another subscription tier and do not want to use Data Movement gateway, select None. For information on the benefits of Data Movement gateway and use cases that require it, see Qlik Data Gateway - Data Movement. |
| IAM User ID |
IAM user ID. In AWS, navigate to Amazon Access Key. |
| IAM User Secret |
IAM user secret. In AWS, navigate to Amazon Secret Access Key. |
| Region |
Region of the hub. |
Supported datasets
The following datasets are supported.
-
Findings
-
Finding History
-
Administrator Account (CDC is not supported)
-
Enabled Standards (CDC is not supported)
-
Finding Aggregators ARNs (CDC is not supported)
-
Finding Aggregators (CDC is not supported)
-
Members (CDC is not supported)
-
Insights (CDC is not supported)
-
Insight Results (CDC is not supported)
-
Invitations (CDC is not supported)
-
Automation Rules (CDC is not supported)
-
Enabled Product Subscriptions (CDC is not supported)
-
Organization Admin Accounts (CDC is not supported)
-
Security Control Definitions (CDC is not supported)
-
Standards Control Associations (CDC is not supported)