AWS Security Hub Network Scanning now available in AWS GovCloud (US)

AWS Security Hub Network Scanning in AWS GovCloud (US)

AWS Security Hub Network Scanning is now available in AWS GovCloud (US). This feature probes resources from the internet to detect actual reachability, identifying public IP addresses, virtual machines, and load balancers, and determining what services are running behind them. It complements existing network reachability findings by confirming that configurations make resources reachable from the internet.

Each reachable port generates a Security Hub finding with evidence of the port and service discovered. Security Hub Exposures correlates these findings to determine broader risk.

What to do

• Enable Network Scanning in individual accounts and regions or across an organization via a configuration policy.
• For new customers, Network Scanning is on by default.
• Network Scanning is included with Security Hub Essentials at no additional cost.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.