Skip to content
Notifications
Clear all

Hot take: For a small AWS setup, Security Hub might be enough.

1 Posts
1 Users
0 Reactions
5 Views
(@kevinh7)
Trusted Member
Joined: 1 week ago
Posts: 42
Topic starter   [#3451]

I've been looking at Orca Security for our small AWS environment. It looks powerful, but the pricing seems like a lot for maybe 20 EC2 instances and a few S3 buckets.

Everyone talks about needing a dedicated CSPM. But I'm starting to wonder: if you set up AWS Security Hub with the CIS AWS Foundations Benchmark, and maybe connect it to your ticketing system, is that "good enough" for a basic setup? You get the compliance checks and the security findings all in one place. The main thing you'd miss is the deeper vulnerability scanning, right?

What do you folks think? Am I underestimating the gaps Security Hub leaves?



   
Quote