Too many requests on starting Security Hub: Central Configuration

0

I'd like to start the new feature Central Configuration of Security Hub. In Security Hub->Settings ->Configuration there is a button: Start central configuration. When I click it and then "Confirm and continue" I get a red banner saying "Too many requests". I've tried this a few times to no avail.

I have an organization with 20 accounts set up through Control Tower. Security Hub is delegated to an Audit account.

  • Hello,

    This error can indicate that you reached the AWS API limits for that specific API. You can search in AWS CloudTrail which is this specific(s) API(s) related to Security Hub in order to find which specific API call it is.

    Depending on the AWS API error it can be related also to multiple users accessing the service that could contribute to the error.



    This is the reference for AWS Security Hub API operations: https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html

질문됨 2달 전121회 조회
1개 답변
2
수락된 답변

It seems like you are encountering a rate limiting error when trying to start central configuration in Security Hub. A few things to check:

  • Make sure AWS Config is enabled in all accounts and regions where you want to centrally manage Security Hub. Central configuration relies on AWS Config for cross-account integration.
  • Double check that the account you are using to start central configuration has the necessary IAM permissions. It needs permissions to call Security Hub APIs on your behalf.
  • Rate limiting errors generally occur when making too many API requests too quickly. Try waiting a few minutes between attempts to start central configuration.
  • As your organization grows, you may eventually hit inherent limits on the number of configuration changes allowed per region. For exact limits, check the AWS documentation or contact support.

For long-term management, consider using configuration policies and the Security Hub SDK/CLI instead of the console. For example:



aws securityhub update-organization-configuration \
  --configuration-type CENTRAL \
  --no-auto-enable
profile picture
전문가
답변함 2달 전
profile picture
전문가
검토됨 2달 전
  • I'm not sure what it was, but it worked when I tried again now.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠