AWS securityhub documentation change
Summary
Added clarification about potential incomplete state of standards even with SUCCESS association status
Security assessment
Documents operational behavior where standards might become non-functional despite successful association, but does not indicate this addresses a specific vulnerability. The change improves awareness of potential monitoring gaps rather than fixing a security flaw.
Diff
diff --git a/securityhub/latest/userguide/view-policy.md b/securityhub/latest/userguide/view-policy.md index 05592415a..54c6b7c67 100644 --- a//securityhub/latest/userguide/view-policy.md +++ b//securityhub/latest/userguide/view-policy.md @@ -94,0 +95,2 @@ If you add a new linked Region, Security Hub replicates your existing associatio +Even when the association status is `SUCCESS`, the enablement status of a standard that is part of the policy can transition into an incomplete state. In that case, Security Hub can't generate findings for the standard's controls. For more information, see [Checking the status of a standard](./enable-standards.html#standard-subscription-status). +