{
  "Name": "AWS Security Hub",
  "Author": "Microsoft - support@microsoft.com",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Aws.svg\" width=\"75px\" height=\"75px\">",
  "Description": "AWS Security Hub Solution for Microsoft Sentinel provides data connector to ingest AWS Security Hub findings into Microsoft Sentinel.",
  "Workbooks": [
      "Workbooks/AWSSecurityHubComplianceWorkbook.json"
  ],
  "WorkbookBladeDescription": "Monitor AWS Security Hub findings and compliance status across multiple accounts and regions. Track failing security controls, analyze resource types, and view IAM/EC2-specific findings. Essential for AWS security monitoring and compliance reporting in Microsoft Sentinel.",
  "StaticDataConnector": true,
  "Data Connectors": [
    "Data Connectors/AWSSecurityHubFindings_CCP/AWSSecurityHubFindings_DataConnectorDefinition.json"
  ],
  "Analytic Rules": [
    "Analytic Rules/CloudTrailTrailEncryptionDisabled.yaml",
    "Analytic Rules/EC2SecurityGroupHighRiskOpenPorts.yaml",
    "Analytic Rules/IAMPolicyWithFullAdminPriv.yaml",
    "Analytic Rules/IAMRootUserMFADisabled.yaml",
    "Analytic Rules/IAMRootUserWithAccessKey.yaml",
    "Analytic Rules/SQSQueueNotEncrypted.yaml",
    "Analytic Rules/SQSQueuePublicAccess.yaml",
    "Analytic Rules/SSMDocumentsPublicSharingEnabled.yaml"
  ],
  "Hunting Queries": [
    "Hunting Queries/CloudTrailLogFileValidationDisabled.yaml",
    "Hunting Queries/EC2InstancePublicIPv4.yaml",
    "Hunting Queries/IAMUserMFADisabled.yaml"
  ],
  "BasePath": "C:\\Github\\Azure-Sentinel\\Solutions\\AWS Security Hub",
  "Version": "3.0.4",
  "Metadata": "SolutionMetadata.json",
  "TemplateSpec": false
}