Watch Desk posted an update
AWS Security Hub Network Scanning is now available in AWS GovCloud (US), giving teams a way to check which of their resources are actually reachable from the internet.
Why it mattersUnlike checks that infer exposure from network settings, the feature probes resources, identifies reachable ports and the services behind them, then creates a finding for each reachable port. Security Hub Exposures can correlate those findings with other security information to assess broader risk. AWS says existing customers can enable scanning for individual accounts and regions or across an organisation. It is included with Security Hub Essentials at no extra cost in supported GovCloud regions. A practical security check, then, rather than another dashboard warning based on what might be exposed.
Discuss: Should cloud security tools actively probe for reachable services by default, or should administrators have to opt in?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.