Bootstrap Posture Baseline
A 3-step recipe with Amazon Security Hub. We can help you get access.
Recipe · 3 steps
Bootstrap Posture Baseline
with Amazon Security Hub
Enable the hub, list standards, and capture an initial active findings snapshot.
- Enable Security Hub for the account, opting in to the default standards so baseline control checks begin running immediately.
- List the available security standards to confirm which baseline controls were enabled by default after the hub was turned on.
- Capture a snapshot of active findings immediately after enablement so later runs can be diffed against this initial posture baseline.
What you'll need to have ready
- enableDefaultStandards: Whether to enable the standards Security Hub designates as automatically enabled.
- controlFindingGenerator: How control findings are generated.
- maxResults: The maximum number of records to return for the standards and findings listings.
For your developer
Arazzo workflow amazon-security-hub:bootstrap-posture-baseline, 3 operations: EnableSecurityHub → DescribeStandards → GetFindings. Specs on APIs.io.