Re-enabling Security Hub
Before re-enabling Security Hub on accounts that were previously disabled using a Security Hub policy, you must first detach the disable policy. If you attempt to re-enable Security Hub while a disable policy is still attached to the account or organizational unit, the disable policy will override the enablement and Security Hub will remain disabled.
To remove the Security Hub disable policy for an organization or an account.
-
Sign in using your AWS account with your organization management account credentials. Open the Security Hub console at https://console.aws.amazon.com/organizations/v2/home
. -
From the navigation panel choose AWS accounts.
-
If the current Security Hub disable policy was for your entire organization choose Root under the Organizational stucture. If the current Security Hub disable policy is for specific accounts, choose the specific account under the Organizational stucture and then follow the remaining steps for each account.
-
In the Policies tab find the section titled Security Hub policies
-
Choose the radio button next to the policy that disables Security Hub. Choose Detatch.
Once the policy has been attached from your organization or accounts you can then re-enable Security Hub. See Managing configuration of member accounts in an AWS Organization for details on re-enabling Security Hub.
