aws-security-hubsecurity-hub-pricing-calculator

AWS Security Hub Pricing Calculator - Essentials Plan and Add-On Capabilities

Estimate AWS Security Hub Essentials plan pricing with consolidated resource-unit billing, plus optional Threat analytics and Lambda code scanning add-ons.

Frequently Asked Questions

How does Security Hub Essentials pricing turn resources into billable units?

AWS prices the Security Hub Essentials planwith consolidated resource units instead of a separate rate for every covered service. This calculator applies AWS's published weighting for EC2 instances, ECR images, Lambda functions, and IAM principals, then multiplies the total by the Essentials per-resource rate.

When should I add Threat analytics to the estimate?

Add Threat analytics when you want to model the optional log-analysis charges layered on top of Essentials. Enter your monthly CloudTrail management events and the other analytics data processed in GB to estimate that add-on separately from the base plan.

Why does Lambda code scanning follow the Security Hub estimator basis instead of live regional variance?

AWS documents that the Security Hub cost estimator uses US East (N. Virginia) pricing for estimates. This calculator follows that published estimator basis for the Lambda code scanning add-on so the estimate stays aligned with the official AWS Security Hub guidance.

CloudBurn

Catch AWS cost mistakes before they ship.

Use the calculator for quick estimates, then use CloudBurn when you need a deterministic cost review workflow. Run scan against Terraform and CloudFormation before deploy, then run discover against live AWS to find the waste that is already burning.

Read the docs to learn how it works.