AWS Security Hub endpoints and quotas - AWS General Reference

AWS Security Hub endpoints and quotas

The following are the service endpoints and service quotas for this service. To connect programmatically to an AWS service, you use an endpoint. In addition to the standard AWS endpoints, some AWS services offer FIPS endpoints in selected Regions. For more information, see AWS service endpoints. Service quotas, also referred to as limits, are the maximum number of service resources or operations for your AWS account. For more information, see AWS service quotas.

Service endpoints

Region Name Region Endpoint Protocol
US East (Ohio) us-east-2

securityhub.us-east-2.amazonaws.com

securityhub-fips.us-east-2.amazonaws.com

HTTPS

HTTPS

US East (N. Virginia) us-east-1

securityhub.us-east-1.amazonaws.com

securityhub-fips.us-east-1.amazonaws.com

HTTPS

HTTPS

US West (N. California) us-west-1

securityhub.us-west-1.amazonaws.com

securityhub-fips.us-west-1.amazonaws.com

HTTPS

HTTPS

US West (Oregon) us-west-2

securityhub.us-west-2.amazonaws.com

securityhub-fips.us-west-2.amazonaws.com

HTTPS

HTTPS

Africa (Cape Town) af-south-1 securityhub.af-south-1.amazonaws.com HTTPS
Asia Pacific (Hong Kong) ap-east-1 securityhub.ap-east-1.amazonaws.com HTTPS
Asia Pacific (Jakarta) ap-southeast-3 securityhub.ap-southeast-3.amazonaws.com HTTPS
Asia Pacific (Mumbai) ap-south-1 securityhub.ap-south-1.amazonaws.com HTTPS
Asia Pacific (Osaka) ap-northeast-3 securityhub.ap-northeast-3.amazonaws.com HTTPS
Asia Pacific (Seoul) ap-northeast-2 securityhub.ap-northeast-2.amazonaws.com HTTPS
Asia Pacific (Singapore) ap-southeast-1 securityhub.ap-southeast-1.amazonaws.com HTTPS
Asia Pacific (Sydney) ap-southeast-2 securityhub.ap-southeast-2.amazonaws.com HTTPS
Asia Pacific (Tokyo) ap-northeast-1 securityhub.ap-northeast-1.amazonaws.com HTTPS
Canada (Central) ca-central-1 securityhub.ca-central-1.amazonaws.com HTTPS
Europe (Frankfurt) eu-central-1 securityhub.eu-central-1.amazonaws.com HTTPS
Europe (Ireland) eu-west-1 securityhub.eu-west-1.amazonaws.com HTTPS
Europe (London) eu-west-2 securityhub.eu-west-2.amazonaws.com HTTPS
Europe (Milan) eu-south-1 securityhub.eu-south-1.amazonaws.com HTTPS
Europe (Paris) eu-west-3 securityhub.eu-west-3.amazonaws.com HTTPS
Europe (Stockholm) eu-north-1 securityhub.eu-north-1.amazonaws.com HTTPS
Middle East (Bahrain) me-south-1 securityhub.me-south-1.amazonaws.com HTTPS
South America (São Paulo) sa-east-1 securityhub.sa-east-1.amazonaws.com HTTPS
AWS GovCloud (US-East) us-gov-east-1

securityhub.us-gov-east-1.amazonaws.com

securityhub-fips.us-gov-east-1.amazonaws.com

HTTPS

HTTPS

AWS GovCloud (US-West) us-gov-west-1

securityhub.us-gov-west-1.amazonaws.com

securityhub-fips.us-gov-west-1.amazonaws.com

HTTPS

HTTPS

Service quotas

Name Default Adjustable Description
Number of Security Hub member accounts Each supported Region: 5,000 No The maximum number of Security Hub member accounts that can be added per AWS account (Security Hub administrator account) per Region.
Number of Security Hub outstanding invitations Each supported Region: 1,000 No The maximum number of outstanding Security Hub member account invitations that can be sent per AWS account (Security Hub administrator account) per Region.
Number of custom actions Each supported Region: 50 No The maximum number of custom actions that can be created per account per Region.
Number of custom insights Each supported Region: 100 No The maximum number of user-defined custom insights that can be created per AWS account per Region.
Number of insight results Each supported Region: 100 No The maximum number of aggregated results returned for the GetInsightsResults API operation.
Security Hub finding retention time Each supported Region: 90 No The maximum number of days a Security Hub finding is saved. This is 90 days after the most recent update or 90 days after the creation date if no update occurs.

For more information about Security Hub quotas, see Quotas in the AWS Security Hub User Guide.