logo

NJP

Security Incident Response integration with AWS SecurityHub

Security Incident Response integration with AWS SecurityHub

by Service-now.com

SIEM integration

0 installs 0 reviews v1.1.2 Scoped Application Free (integration tables[9] not counted) 9 tables
Developer Instance Sub-Production

Install Trend

First tracked: 2025-01-02 Latest: 2026-09-09 (0 installs)
View Install Data
Date Install Count Change
2026-09-09 0 -
134 days of no change
2026-04-27 5 -5
145 days of no change
2025-12-02 4 +1
17 days of no change
2025-11-14 3 +1
2025-11-13 2 +1
42 days of no change
2025-10-01 1 +1
256 days of no change
2025-01-17 0 +1

About

AWS Security Hub integration with Security Incident Response is a new SIEM integration. The AWS Security Hub integration enables SIR to ingest Security Hub findings and create corresponding security incidents.

Key Features

**Key features**

- AWS Security Hub integration with Security Incident Response follows a bidirectional architecture. All updates in AWS Security Hub is synchronized with SIR work notes and vice versa.
- Discover AWS Security Hub findings that are candidates for security incidents and automate the creation of these security incidents.
- Map AWS Security Hub findings and entity fields to SIR security incident fields.
- Filter AWS Security Hub findings.
- Aggregate findings to existing open security incidents so that you don't have to create duplicate security incidents.
- Schedule findings ingestion to create security incidents periodically.
- Automate AWS Security Hub findings status updates for Security Incident Response so that you can create and close security incidents.

Version History (6)
v1.1.2 2026-06-16 16:45:55
Fixed: Added OOB field translations for Priority, Category and Configuration Item fields.
v1.1.1 2026-05-05 14:59:01
Fixed: SIRs are not created from SIEM ingestion due to "Secure Notes" access issue to Crypto module since Yokohama upgrade is fixed. Access issues...
v1.1.0 2025-12-11 13:42:58
New:  Upgraded all dictionary-level read-only fields to Strict Read-Only to enhance security and prevent unauthorized changes. This ensure...
v1.0.3 2025-07-31 15:38:10
Fixed:   Blank SIR's getting created due to gr.update in Process Raw Data.
v1.0.2 2025-03-12 12:22:53
Fixed : Version 1.0.2 of "Security Incident Response integration with AWS SecurityHub" includes a defect fix
v1.0.1 2024-11-07 14:50:50
Initial release
ID: 80e1b19a37e30210d571ca059cbb6a03 · Published: Jun 2026 · Updated: Sep 09, 2026