A security team is using GuardDuty, Inspector and Macie across several accounts and wants one place that aggregates the findings from these services and checks the environment against security standards. Which AWS service provides this central view?
- AAWS Security Hub, which aggregates findings from multiple security services and checks against security standards Correct
- BAmazon CloudWatch, which collects metrics and logs so teams can watch the operational health of their workloads
- CAWS CloudTrail, which records the API calls made within an account so user actions can be reviewed later
- DAmazon GuardDuty, which continuously analyses account and network logs to detect malicious or unusual behaviour
Why A is correct: Security Hub is the central security posture service that consolidates findings from GuardDuty, Inspector and Macie and runs automated checks against standards, which is the single pane the team wants.
Why B is wrong: CloudWatch monitors performance and stores logs, but it does not aggregate security findings from services like GuardDuty or check them against security standards, so it is not the central console.
Why C is wrong: CloudTrail logs API activity for auditing, yet it does not consolidate findings from other security services or measure them against standards, so it cannot give the central view.
Why D is wrong: GuardDuty produces its own threat findings, but it is one source feeding into a central view rather than the service that aggregates findings from Inspector and Macie too.