Function Overview

Situation Awareness (SA) is a GUI-based security event management and situation analysis platform on HUAWEI CLOUD. SA comprehensively analyzes attack events, threat alarms, and attack sources by leveraging the big data technique, making it simple for you to understand security situation across all your cloud assets.

Security Overview consists of Secure Score, Security Monitoring, Your Secure Score over Time, and Threat Detection. SA works with other cloud security services to display real-time security assessment results. On the Security Overview page, you can view security status of all your cloud resources, take actions in just a few clicks, and manage risks centrally.

SA synchronizes the security status statistics of all resources in your current account. You can quickly locate unhealthy resources and find the solutions by viewing the resource name and security status as well as cloud services and regions involved.

SA aggregates security data from Host Security Service (HSS), Web Application Firewall (WAF), and Database Security Service (DBSS) and then displays security posture and risks of all your cloud assets.

SA reports alarms based on real-time monitoring, displays details of alarms for the last 180 days, and defends against typical threats by using various preset protection policies.

SA can scan cloud baseline configurations to find out unsafe settings, report alarms for events, and offer hardening suggestions to you.

Baseline inspection: You can start a one-time scan or configure scheduled scans to let SA display results by category and provide hardening suggestions for you to fix unsafe settings.

SA aggregates detection data from a variety of related services so that you can monitor all events in one place.

You can transfer SA logs stored in Log Tank Service (LTS) to an Object Storage Service (OBS) bucket for long-term storage. This makes it easier for you to store and export logs and meet the requirements of log storage for 180 days and centralized audit.

You can aggregate inspection results from other HUAWEI CLOUD security services and third-party security platforms to manage all events with SA.