Register and configure the AWS Security Hub portal
Register your application in the AWS Security Hub portal and grant your users with read and write access to the application.
Registering a ServiceNow® user profile on AWS portal
Before you begin
Role required: AWSSecurityHubFullAccess
Procedure
Log in to the AWS portal.
Navigate to Identity and Access Management (IAM) > Users > Create New User.
The following table describes the fields that you must configure to create a user profile:
| Field | Description |
|---|---|
| Specify user details > User name | Name for the user profile. |
| Set permissions > **Add user to group | Add the user profile to a group with predefined permission policies.You can create a group according to your preference and assign permission policies to the group. Later, you can add user profiles to the group and the permission policies assigned to the group is automatically assigned to the user profiles. |
| Copy permissions | Copy permissions from a user profile and assign the same to the new user profile. |
| Attach policies directly | Add AWSSecurityHubFullAccess as the permission policy for your user profile.Assign a new permission policy to the user profile according to your preference. |
| Review and create | Review all the details that you added in the user profile. |
Select Create user.
Select View user from the displayed pop-up window.
Create an access key and a secret access key for the user profile.
You require these keys to access the AWS Security Hub integration from your ServiceNow® instance.
Navigate to AWS Services > Search > AWS Security Hub > .
Select Go to Security Hub.
In the Enable AWS Security Hub page, select Download to enable AWS Config.
Download the files and run them in your account. This grants you permission to gather all the information from various AWS reporting services and aggregate into AWS Security Hub.
Select Enable AWS Security Hubat the bottom of the page.
It takes a few moments for the AWS Security Hub Dashboard to display all the details.
Change Region from Global to US East (Ohio).
The code for US East (Ohio) is us-east-2. All ServiceNow® resources are assigned to this region code.