Insights and Custom Finding Actions
Group related findings and trigger workflows from Security Hub.
From Many Findings to Meaning
A long list of normalized findings is still hard to act on. Security Hub adds two tools to turn that list into focused action: insights that group related findings, and custom actions that let you trigger workflows from selected findings.
What an Insight Is
A Security Hub insight is a saved grouping of findings collected by a filter and a "group by" attribute. For example, an insight could group active findings by resource to reveal which resources have the most problems. Insights surface patterns that single findings hide.
All lessons in this course
- What Security Hub Aggregates
- Security Standards and Compliance Scores
- The ASFF Finding Format
- Insights and Custom Finding Actions