Ravi Sir's Cards › AWS
Detect or aggregate?
This comparison card contrasts Detect or aggregate. Amazon GuardDuty is described as threat findings from logs/traffic/DNS. AWS Security Hub is described as aggregates findings + security standards score. The card pairs Amazon GuardDuty with threat detection feed, and AWS Security Hub with posture and one triage queue.
Read card text
What this card says
Detect or aggregate?
Amazon GuardDuty
Threat findings from logs/traffic/DNS.
AWS Security Hub
Aggregates findings + security standards score.
Key points
Crypto-mining on an EC2.
FSBP control failed on public S3.
Example
GuardDuty finding CRITICAL / Security Hub FSBP product
Use when
Threat detection feed.
Posture and one triage queue.