Pricing

AWS Security Hub CSPM pricing

As aws.amazon.com lists them, read 4 Oct 2026. The maker's own page has the final word.

Plan	Billed and limits	Price
Security Hub Essentials	Pay-as-you-go; resource unit / mo; prorated by monitored time · Per-resource charges apply to EC2 instances, ECR container images, Lambda functions, and IAM users/roles; other monitored resources are included; AWS and Azure coverage	On request
Security Hub Extended Plan	Pay-as-you-go per partner; no upfront commitments · Essentials must be enabled first; charges are additional to Essentials; 23 curated partner solutions across 10 security categories	On request
Threat Analytics + Lambda Code Scanning add-ons	Tiered by volume; in addition to Essentials · Threat Analytics covers CloudTrail management events, S3 data events, VPC Flow Logs, DNS query logs, and EKS audit logs; Lambda code scanning scans on deployment and periodically	On request