A service that aggregates, normalizes, and prioritizes findings from GuardDuty, Inspector, Macie, Config, and third-party tools into a single dashboard. It evaluates compliance against standards like CIS Benchmark and AWS Foundational Security Best Practices.
In SAP-C02 it's the consolidation layer above the individual detection services. Question: get a centralized view of the security posture across an entire multi-account organization → Security Hub with cross-account aggregation.
AWS Security Hub is a concept that can show up on the exam. Check the full guide to see it in context.