Add member accounts Invite member accounts

Adding and inviting member accounts

Your account becomes the Amazon Security Hub administrator for accounts that accept your invitation.

When you accept an invitation from another account, your account becomes a member account, and that account becomes your administrator.

If your account is an administrator account, you can't accept an invitation to become a member account.

Adding a member account consists of the following steps:

The administrator account adds the member account to their list of member accounts.
The administrator account sends an invitation to the member account.
The member account accepts the invitation.

Add member accounts

From the Security Hub console, you can add accounts to your list of member accounts. In the Security Hub console, you can select accounts individually, or upload a .csv file that contains the account information.

For each account, you must provide the account ID and an email address. The email address should be the email address to contact about security issues in the account. It is not used to verify the account.

Choose your preferred method, and follow the steps to add member accounts.

Security Hub console

To add accounts to your list of member accounts

Open the Amazon Security Hub console at https://console.amazonaws.cn/securityhub/.

Sign in using the credentials of the administrator account.
In the left pane, choose Settings.
On the Settings page, choose Accounts and then choose Add accounts. You can then either add accounts individually or upload a .csv file containing the list of accounts.
To select the accounts, do one of the following:
- To add the accounts individually, under Enter accounts, enter the account ID and email address of the account to add, and then choose Add.
  
  Repeat this process for each account.
- To use a comma-separated values (.csv) file to add multiple accounts, first create the file. The file must contain the account ID and email address for each account to add.
  
  In your .csv list, accounts must appear one per line. The first line of the .csv file must contain the header. In the header, the first column is Account ID and the second column is Email.
  
  Each subsequent line must contain a valid account ID and email address for the account to add.
  
  Here is an example of a .csv file when viewed in a text editor.
```
Account ID,Email
111111111111,user@example.com
```
  In a spreadsheet program, the fields appear in separate columns. The underlying format is still comma-separated. You must format the account IDs as non-decimal numbers. For example, the account ID 444455556666 cannot be formatted as 444455556666.0. Also make sure that the number formatting does not remove any leading zeros from the account ID.
  
  To select the file, on the console, choose Upload list (.csv). Then choose Browse.
  
  After you select the file, choose Add accounts.
After you finish adding accounts, under Accounts to be added, choose Next.

Security Hub API

To add accounts to your list of member accounts

Invoke the CreateMembers API from the administrator account. For each member account to add, you must provide the Amazon Web Services account ID.

Amazon CLI

To add accounts to your list of member accounts

Run the create-members command from the administrator account. For each member account to add, you must provide the Amazon Web Services account ID.


aws securityhub create-members --account-details '[{"AccountId": "<accountID1>"}]'

Example


aws securityhub create-members --account-details '[{"AccountId": "123456789111"}, {"AccountId": "123456789222"}]'

Invite member accounts

After you add the member accounts, you send an invitation to the member account. You can also resend an invitation to an account that you disassociated from the administrator.

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Managing accounts by invitation

Responding to an invitation

Adding and inviting member accounts

Add member accounts

To add accounts to your list of member accounts

Invite member accounts

To invite prospective member accounts

Note