Too many requests on starting Security Hub: Central Configuration

0

I'd like to start the new feature Central Configuration of Security Hub. In Security Hub->Settings ->Configuration there is a button: Start central configuration. When I click it and then "Confirm and continue" I get a red banner saying "Too many requests". I've tried this a few times to no avail.

I have an organization with 20 accounts set up through Control Tower. Security Hub is delegated to an Audit account.

  • Hello,

    This error can indicate that you reached the AWS API limits for that specific API. You can search in AWS CloudTrail which is this specific(s) API(s) related to Security Hub in order to find which specific API call it is.

    Depending on the AWS API error it can be related also to multiple users accessing the service that could contribute to the error.



    This is the reference for AWS Security Hub API operations: https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html

asked 2 months ago97 views
1 Answer
2
Accepted Answer

It seems like you are encountering a rate limiting error when trying to start central configuration in Security Hub. A few things to check:

  • Make sure AWS Config is enabled in all accounts and regions where you want to centrally manage Security Hub. Central configuration relies on AWS Config for cross-account integration.
  • Double check that the account you are using to start central configuration has the necessary IAM permissions. It needs permissions to call Security Hub APIs on your behalf.
  • Rate limiting errors generally occur when making too many API requests too quickly. Try waiting a few minutes between attempts to start central configuration.
  • As your organization grows, you may eventually hit inherent limits on the number of configuration changes allowed per region. For exact limits, check the AWS documentation or contact support.

For long-term management, consider using configuration policies and the Security Hub SDK/CLI instead of the console. For example:



aws securityhub update-organization-configuration \
  --configuration-type CENTRAL \
  --no-auto-enable
profile picture
EXPERT
answered 2 months ago
profile picture
EXPERT
reviewed a month ago
  • I'm not sure what it was, but it worked when I tried again now.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions