A company provisioned a multi-account AWS environment using AWS Control Tower. The security team will deploy both preventive and detective controls across all accounts and needs a centralized view of the security posture for every account. Which solution provides a centralized security view and meets these requirements?

AWS Security Hub is the correct solution because it provides a comprehensive view of the security posture across all AWS accounts. By enabling Security Hub for the organization and designating a delegated administrator, the security team gains a centralized dashboard to aggregate, organize, and prioritize security findings from various AWS services (like GuardDuty, Inspector, Macie) and partner solutions. This meets the requirement for both preventive (through integration with other services) and detective controls, and offers a centralized view. Incorrect options: AWS CloudFormation StackSets with AWS Config conformance packs are excellent for deploying and managing preventive controls and checking compliance, but they don't provide a centralized security posture view of findings from multiple security services. Amazon Detective is a valuable service for investigating security findings, but it focuses on analyzing and visualizing potential security issues rather than providing a holistic, centralized security posture overview like Security Hub. Deploying a CloudFormation stack set to enable Amazon Detective for the organization still limits the scope to Detective's capabilities and doesn't offer the broad, centralized security posture view that Security Hub provides.