Moving AWS Organization accounts to new Security Hub

Question

We currently have a number of accounts in the organization that were added to the wrong Security Hub account which we want to migrate to the correct instance. The documentation seems a little ambiguous regarding the removal of an account from Security Hub: https://docs.aws.amazon.com/securityhub/latest/userguide/accounts-orgs-disassociate.html

Will removing an account from Security Hub also remove it from the AWS Organization?

Jimmy Morgan · Accepted Answer

Hi,

In short, no disassociating the account from Security Hub will not remove it from the Organization. It will stop the account Security Hub findings from being aggregated to the central Security Hub. And also means that central Security Hub won't be able to manage the account configuration.

Moving AWS Organization accounts to new Security Hub

Relevant content