Security Hub CSPM automation rule migration to Security Hub

AWS announces the new Security Hub and provides a Python-based migration tool to automatically discover, analyze, and transform existing Security Hub CSPM automation rules (ASFF) into the new OCSF-based format, generating CloudFormation templates for deployment. The post includes field mapping tables, notes on unsupported and partially migrated actions, required software and permissions, organizational and regional deployment considerations (home region vs. region-by-region), rule ordering preservation, and step-by-step guidance to deploy, validate, and enable migrated rules.