We can set up Security Hub in a region as follows:
- Go to the Security Hub service in the console. If we are using Security Hub for the first time, we should see a Getting started landing page with a Go to Security Hub button.
- Click on Go to Security Hub. We should see the Welcome to AWS Security Hub page with the Enable Security Hub option, and a list of services with Service Linked Roles (SLRs) for conducting compliance checks (currently, Amazon CloudWatch, Amazon SNS, AWS Config, and AWS CloudTrail) and permissions for importing findings (currently Amazon GuardDuty, Amazon Inspector, Amazon Macie, AWS Firewall Manager, and IAM Access Analyzer).
- Click on Enable Security Hub. We should see a screen with sections for Summary ...