# AWS Security Hub

**Canonical:** https://apis.io/providers/aws-security-hub/  
**Website:** https://aws.amazon.com/security-hub/  
**APIs profiled:** 12

AWS Security Hub is a cloud security posture management (CSPM) service that aggregates, organizes, and prioritizes security findings from AWS services like Amazon GuardDuty, Inspector, and Macie, as well as supported third-party products. It continuously assesses your AWS environment against security standards such as AWS Foundational Security Best Practices, CIS, PCI DSS, and NIST. The Security Hub API and AWS SDKs provide access to findings, controls, insights, and automation rules using AWS Signature Version 4 authentication.

## Kin Score — 30.9 / 100 (thin)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 30.9).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 49.5 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 0.0 |
| Developer Ergonomics | 23.8 |
| Commercial Clarity | 31.6 |
| Access Clarity | 31.6 |

## Agent readiness — 26.1 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (12)

- **AWS Security Hub CSPM API** — REST API for managing security standards, controls, findings, insights, automation rules, and member account configuration in AWS Security Hub. Requests are authenticated with A...
- **AWS Security Hub Action Targets API** — The Action Targets API from AWS Security Hub — 1 operation(s) for action targets.
- **AWS Security Hub Automation Rules API** — The Automation Rules API from AWS Security Hub — 4 operation(s) for automation rules.
- **AWS Security Hub Configuration Policies API** — The Configuration Policies API from AWS Security Hub — 3 operation(s) for configuration policies.
- **AWS Security Hub Controls API** — The Controls API from AWS Security Hub — 3 operation(s) for controls.
- **AWS Security Hub Findings API** — The Findings API from AWS Security Hub — 3 operation(s) for findings.
- **AWS Security Hub Hub API** — The Hub API from AWS Security Hub — 1 operation(s) for hub.
- **AWS Security Hub Insights API** — The Insights API from AWS Security Hub — 4 operation(s) for insights.
- **AWS Security Hub Invitations API** — The Invitations API from AWS Security Hub — 3 operation(s) for invitations.
- **AWS Security Hub Members API** — The Members API from AWS Security Hub — 4 operation(s) for members.
- **AWS Security Hub Standards API** — The Standards API from AWS Security Hub — 4 operation(s) for standards.
- **AWS Security Hub Tags API** — The Tags API from AWS Security Hub — 1 operation(s) for tags.

## Agentic access (1)

- **Aws Security Hub Agentic Access** — 40 operations · 27 acting · 3 human-in-the-loop

## Security (4)

- **Aws Security Hub Authentication** — apiKey · 1 scheme
- **Aws Security Hub Domain Security** — TLSv1.3 · HSTS · DMARC
- **Aws Security Hub Vulnerability Disclosure** — security.txt · contact published
- **Aws Security Hub Trust Center** — PCI DSS, HIPAA, FedRAMP, GDPR, FIPS 140

## Tags

Security, Cloud Security Posture Management, Compliance, Findings, Threat Detection, Cloud

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/aws-security-hub/). Scores are computed from the provider's own public artifacts under a published rubric.