Amazon CloudWatch now supports ingesting Security Hub CSPM findings with organization-wide enablement

This article announces that Amazon CloudWatch now supports ingesting AWS Security Hub CSPM findings, enabling centralized security analysis and monitoring directly in CloudWatch Logs.

• Security Hub CSPM findings available in ASFF and OCSF formats via CloudWatch Pipelines
• Use CloudWatch Logs Insights to query findings and create metric filters
• Leverage S3 Tables integration for advanced security analytics
• Organization-wide enablement rules automatically send findings to CloudWatch Logs
• Apply rules to entire organization or specific accounts for consistent monitoring
• Available in all AWS commercial regions with tiered pricing

This integration streamlines security monitoring by centralizing Security Hub findings in CloudWatch, enabling faster threat identification and response across AWS environments.