AWS Security Hub

The AWS Security Hub integration sends Snyk issues to Security Hub, allowing you to centralize your security reporting, build custom alerting, and trigger automation. Once configured, the integration will automatically upload Snyk issues to Security Hub as security findings. When issues are updated or new remediations become available, the corresponding Security Hub findings will automatically be updated.

There are two steps required to configure the integration:

1. Configure Security Hub to accept findings from Snyk in the Security Hub console.

2. Configure Snyk to send findings to Security Hub in the Snyk dashboard.

Configuring Security Hub to accept Snyk findings

Go the the Security Hub console for the AWS account and region you want to receive Snyk findings. Navigate to the Integrations section and search for Snyk. On the Snyk integration tile, click Accept findings and follow the prompts.

Once this step is done, you can continue setting up the integration in the Snyk dashboard.

Configuring Snyk to send findings to Security Hub

Navigate to the Snyk integrations page and search for Security Hub or navigate to the Cloud events section. Click on the Security Hub tile to start creating a new integration.

Enter a name for the integration, along with the AWS Account ID and AWS Region where you enabled the Snyk partner integration in step one.

After this step is complete, Snyk will begin sending new issue events to Security Hub.

Managing and deleting a Security Hub integration

Go to the Security Hub integration settings page in the Snyk dashboard and click on the name of the integration you want to manage.

Clicking on the name of an integration opens the settings page for that integration, where you can view and update configuration information for the integration.

To delete an integration, scroll to the bottom of the integration settings page and click the Remove integration button.

After the integration is deleted, Snyk will no longer send issues to Security Hub. Issues that have already been sent to Security Hub will remain there until they are archived.