Query your data - Security Insights on AWS

Query your data

If you selected Yes for the Create QuickSight Q Topics parameter in Step 1: Launch the stack, you can ask questions about your Security Hub findings and CloudTrail management events in Security Lake.

Follow these instructions to query your data.

  1. Sign in to the QuickSight console.

  2. Choose this solution’s QuickSight dashboard.

  3. Choose Q Topics from the left navigation menu.

  4. Choose SecurityInsights-SecurityHubTopic or SecurityInsights-CloudTrailTopic.

The following image shows an example query and response for Security Hub findings.

Solution creates resources in your Amazon QuickSight account to visualize data from your Security Lake.

The following image shows an example query and response for CloudTrail management events.

Solution creates resources in your Amazon QuickSight account to visualize data from your Security Lake.

See the prompt library for example questions and instructions for writing your own questions.