AWS Security Hub now performs active network reachability testing on your cloud resources and adds impact analysis to exposure findings. Network Scanning is an opt-in feature that probes your resources from outside your accounts to identify open ports and running services, answering two questions: Is this resource reachable from the internet? If reachable, what is running? Impact analysis extends exposure findings by mapping the downstream resources that could be compromised beyond the initially exposed resource, analyzing IAM privilege escalation paths and factoring scope of impact into severity scoring. In this video we walk through enabling Network Scanning, understanding the OCSF findings it produces, and using the potential attack path graph and Impact Assessment tab to prioritize exposures with the greatest downstream reach.
Subscribe to AWS: https://go.aws/subscribe
Create a free AWS account: https://go.aws/signup
Try AWS for free: https://go.aws/free
Connect with an expert: https://go.aws/contact
Explore more: https://go.aws/more
Next steps:
Explore on AWS in Analyst Research: https://go.aws/reports
Discover, deploy, and manage software that runs on AWS: https://go.aws/marketplace
Join the AWS Partner Network: https://go.aws/partners
Learn more on how Amazon builds and operates software: https://go.aws/library
Do you have technical AWS questions?
Ask the community of experts on AWS re:Post: https://go.aws/3lPaoPb
Why AWS?
Amazon Web Services is the world’s most comprehensive and broadly adopted cloud, enabling customers to build anything they can imagine. We offer the greatest choice of innovative cloud capabilities and expertise, on the most extensive global infrastructure with industry-leading security, reliability, and performance.
#AWS #AmazonWebServices #CloudComputing