A security team wants a single pane of glass aggregating findings from GuardDuty, Inspector, Macie, and third-party tools across all accounts, with severity scoring and automated remediation. Which service?
A.AWS Config
Config tracks resource configuration compliance, not security findings aggregation.
B.AWS Security Hub
Correct. Security Hub is the central security findings dashboard.
C.Amazon Detective
Detective visualizes/investigates findings sources but isn't the aggregation layer.
D.AWS Trusted Advisor
Trusted Advisor gives best-practice checks, not findings correlation.
Why this answer
Security Hub is the central findings aggregation service — it normalizes findings from AWS services and partner integrations, scores them by severity, and supports automated remediation via custom actions and EventBridge.
Correct answer: B · Last reviewed 2026-10-26
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Detection & Response practice session.
Practice Detection & Response