AWS Security Hub launches 4 new security best practice controls

AWS Security Hub has released 4 new controls for its National Institute of Standards and Technology (NIST) SP 800-53 Rev. 5 standard. These controls conduct fully-automatic security checks against Elastic Load Balancing (ELB), Amazon Elastic Kubernetes Service (Amazon EKS), Amazon Redshift, and Amazon Simple Storage Service (Amazon S3). To use these controls, you should first turn on the NIST standard. If you are already using the standard and have Security Hub set to automatically turn on new controls, these new controls will run without having to take any additional action.

With this release, Security Hub now supports up to 257 security controls to automatically check your security posture in AWS.

The new controls that we launched are:

• [ELB.16] Application Load Balancers should be associated with an AWS WAF web ACL
• [EKS.1] EKS cluster endpoints should not be publicly accessible
• [Redshift.10] Redshift clusters should be encrypted at rest
• [S3.15] S3 buckets should be configured to use Object Lock

You can begin your 30-day free trial of Security Hub with a single action in the AWS Management console. Please consult the AWS Regions page for all the Regions where Security Hub is available. To learn more about Security Hub capabilities, consult the Security Hub documentation, and to start your 30-day free trial, visit the Security Hub free trial page.

To receive notifications about new Security Hub features and controls, subscribe to the Security Hub SNS topic in your preferred Region.