AWS Security Hub endpoints and quotas
The following are the service endpoints and service quotas for this service. To connect programmatically to an AWS service, you use an endpoint. In addition to the standard AWS endpoints, some AWS services offer FIPS endpoints in selected Regions. For more information, see AWS service endpoints. Service quotas, also referred to as limits, are the maximum number of service resources or operations for your AWS account. For more information, see AWS service quotas.
Service endpoints
| Region Name | Region | Endpoint | Protocol |
|---|---|---|---|
| US East (Ohio) | us-east-2 |
securityhub.us-east-2.amazonaws.com securityhub-fips.us-east-2.amazonaws.com |
HTTPS HTTPS |
| US East (N. Virginia) | us-east-1 |
securityhub.us-east-1.amazonaws.com securityhub-fips.us-east-1.amazonaws.com |
HTTPS HTTPS |
| US West (N. California) | us-west-1 |
securityhub.us-west-1.amazonaws.com securityhub-fips.us-west-1.amazonaws.com |
HTTPS HTTPS |
| US West (Oregon) | us-west-2 |
securityhub.us-west-2.amazonaws.com securityhub-fips.us-west-2.amazonaws.com |
HTTPS HTTPS |
| Africa (Cape Town) | af-south-1 | securityhub.af-south-1.amazonaws.com | HTTPS |
| Asia Pacific (Hong Kong) | ap-east-1 | securityhub.ap-east-1.amazonaws.com | HTTPS |
| Asia Pacific (Hyderabad) | ap-south-2 | securityhub.ap-south-2.amazonaws.com | HTTPS |
| Asia Pacific (Jakarta) | ap-southeast-3 | securityhub.ap-southeast-3.amazonaws.com | HTTPS |
| Asia Pacific (Melbourne) | ap-southeast-4 | securityhub.ap-southeast-4.amazonaws.com | HTTPS |
| Asia Pacific (Mumbai) | ap-south-1 | securityhub.ap-south-1.amazonaws.com | HTTPS |
| Asia Pacific (Osaka) | ap-northeast-3 | securityhub.ap-northeast-3.amazonaws.com | HTTPS |
| Asia Pacific (Seoul) | ap-northeast-2 | securityhub.ap-northeast-2.amazonaws.com | HTTPS |
| Asia Pacific (Singapore) | ap-southeast-1 | securityhub.ap-southeast-1.amazonaws.com | HTTPS |
| Asia Pacific (Sydney) | ap-southeast-2 | securityhub.ap-southeast-2.amazonaws.com | HTTPS |
| Asia Pacific (Tokyo) | ap-northeast-1 | securityhub.ap-northeast-1.amazonaws.com | HTTPS |
| Canada (Central) | ca-central-1 | securityhub.ca-central-1.amazonaws.com | HTTPS |
| Europe (Frankfurt) | eu-central-1 | securityhub.eu-central-1.amazonaws.com | HTTPS |
| Europe (Ireland) | eu-west-1 | securityhub.eu-west-1.amazonaws.com | HTTPS |
| Europe (London) | eu-west-2 | securityhub.eu-west-2.amazonaws.com | HTTPS |
| Europe (Milan) | eu-south-1 | securityhub.eu-south-1.amazonaws.com | HTTPS |
| Europe (Paris) | eu-west-3 | securityhub.eu-west-3.amazonaws.com | HTTPS |
| Europe (Spain) | eu-south-2 | securityhub.eu-south-2.amazonaws.com | HTTPS |
| Europe (Stockholm) | eu-north-1 | securityhub.eu-north-1.amazonaws.com | HTTPS |
| Europe (Zurich) | eu-central-2 | securityhub.eu-central-2.amazonaws.com | HTTPS |
| Israel (Tel Aviv) | il-central-1 | securityhub.il-central-1.amazonaws.com | HTTPS |
| Middle East (Bahrain) | me-south-1 | securityhub.me-south-1.amazonaws.com | HTTPS |
| Middle East (UAE) | me-central-1 | securityhub.me-central-1.amazonaws.com | HTTPS |
| South America (São Paulo) | sa-east-1 | securityhub.sa-east-1.amazonaws.com | HTTPS |
| AWS GovCloud (US-East) | us-gov-east-1 |
securityhub.us-gov-east-1.amazonaws.com securityhub-fips.us-gov-east-1.amazonaws.com |
HTTPS HTTPS |
| AWS GovCloud (US-West) | us-gov-west-1 |
securityhub.us-gov-west-1.amazonaws.com securityhub-fips.us-gov-west-1.amazonaws.com |
HTTPS HTTPS |
Service quotas
| Name | Default | Adjustable | Description |
|---|---|---|---|
| Number of Security Hub member accounts | Each supported Region: 10,000 | No | The maximum number of Security Hub member accounts that can be added for each Security Hub administrator account in each Region. |
| Number of Security Hub outstanding invitations | Each supported Region: 1,000 | No | The maximum number of outstanding Security Hub member account invitations that can be sent per AWS account (Security Hub administrator account) per Region. |
| Number of automation rules | Each supported Region: 100 | No | The maximum number of automation rules that can be created for a Security Hub administrator account. To create more than 100 rules, you must contact AWS Support and be enrolled in an eligible support plan. |
| Number of custom actions | Each supported Region: 50 | No | The maximum number of custom actions that can be created per account per Region. |
| Number of custom insights | Each supported Region: 100 | No | The maximum number of user-defined custom insights that can be created per AWS account per Region. |
| Number of insight results | Each supported Region: 100 | No | The maximum number of aggregated results returned for the GetInsightsResults API operation. |
| Security Hub finding retention time | Each supported Region: 90 | No | The maximum number of days a Security Hub finding is saved. This is 90 days after the most recent update or 90 days after the creation date if no update occurs. |
For more information about Security Hub quotas, see Quotas in the AWS Security Hub User Guide.
