Tools/AWS_Security_Hub
AWS Security Hub
Cloud Security Posture Management (CSPM) — aggregates findings from GuardDuty, Inspector, Macie, and IAM Access Analyzer into one "pane of glass" against CIS benchmarks. Most-used open-source combination is Prowler (generates the findings, CIS/compliance checks across accounts) feeding into Wazuh (aggregation/dashboarding/alerting) — no single OSS tool matches Security Hub's native multi-service aggregation, so it's typically assembled from 2+ tools.