Too many requests on starting Security Hub: Central Configuration

0

I'd like to start the new feature Central Configuration of Security Hub. In Security Hub->Settings ->Configuration there is a button: Start central configuration. When I click it and then "Confirm and continue" I get a red banner saying "Too many requests". I've tried this a few times to no avail.

I have an organization with 20 accounts set up through Control Tower. Security Hub is delegated to an Audit account.

  • Hello,

    This error can indicate that you reached the AWS API limits for that specific API. You can search in AWS CloudTrail which is this specific(s) API(s) related to Security Hub in order to find which specific API call it is.

    Depending on the AWS API error it can be related also to multiple users accessing the service that could contribute to the error.



    This is the reference for AWS Security Hub API operations: https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html

preguntada hace 2 meses121 visualizaciones
1 Respuesta
2
Respuesta aceptada

It seems like you are encountering a rate limiting error when trying to start central configuration in Security Hub. A few things to check:

  • Make sure AWS Config is enabled in all accounts and regions where you want to centrally manage Security Hub. Central configuration relies on AWS Config for cross-account integration.
  • Double check that the account you are using to start central configuration has the necessary IAM permissions. It needs permissions to call Security Hub APIs on your behalf.
  • Rate limiting errors generally occur when making too many API requests too quickly. Try waiting a few minutes between attempts to start central configuration.
  • As your organization grows, you may eventually hit inherent limits on the number of configuration changes allowed per region. For exact limits, check the AWS documentation or contact support.

For long-term management, consider using configuration policies and the Security Hub SDK/CLI instead of the console. For example:



aws securityhub update-organization-configuration \
  --configuration-type CENTRAL \
  --no-auto-enable
profile picture
EXPERTO
respondido hace 2 meses
profile picture
EXPERTO
revisado hace 2 meses
  • I'm not sure what it was, but it worked when I tried again now.

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas