AWS securityhub documentation change
Summary
Multiple editorial changes including title formatting, wording improvements, Config rule link formatting, and adding StringList limit for requiredTagKeys
Security assessment
Changes are primarily editorial improvements and parameter clarifications without security-specific context
Diff
diff --git a/securityhub/latest/userguide/cloudtrail-controls.md b/securityhub/latest/userguide/cloudtrail-controls.md index ed74defb1..9a2927bbf 100644 --- a//securityhub/latest/userguide/cloudtrail-controls.md +++ b//securityhub/latest/userguide/cloudtrail-controls.md @@ -7 +7 @@ -# Security Hub controls for CloudTrail +# Security Hub controls for AWS CloudTrail @@ -9,3 +9 @@ -These Security Hub controls evaluate the AWS CloudTrail service and resources. - -These controls may not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). +These AWS Security Hub controls evaluate the AWS CloudTrail service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). @@ -23 +21 @@ These controls may not be available in all AWS Regions. For more information, se -**AWS Config rule:** [`multi-region-cloudtrail-enabled`](https://docs.aws.amazon.com/config/latest/developerguide/multi-region-cloudtrail-enabled.html) +**AWS Config rule:** [multi-region-cloudtrail-enabled](https://docs.aws.amazon.com/config/latest/developerguide/multi-region-cloudtrail-enabled.html) @@ -89 +87 @@ To update an existing trail, see [Updating a trail](https://docs.aws.amazon.com/ -**AWS Config rule:** [`cloud-trail-encryption-enabled`](https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-encryption-enabled.html) +**AWS Config rule:** [cloud-trail-encryption-enabled](https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-encryption-enabled.html) @@ -113 +111 @@ To enable SSE-KMS encryption for CloudTrail log files, see [Update a trail to us -**AWS Config rule:** [`cloudtrail-enabled`](https://docs.aws.amazon.com/config/latest/developerguide/cloudtrail-enabled.html) +**AWS Config rule:** [cloudtrail-enabled](https://docs.aws.amazon.com/config/latest/developerguide/cloudtrail-enabled.html) @@ -137 +135 @@ To get started with CloudTrail and create a trail, see the [Getting started with -**AWS Config rule:** [`cloud-trail-log-file-validation-enabled`](https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-log-file-validation-enabled.html) +**AWS Config rule:** [cloud-trail-log-file-validation-enabled](https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-log-file-validation-enabled.html) @@ -163 +161 @@ To enable CloudTrail log file validation, see [Enabling log file integrity valid -**AWS Config rule:** [`cloud-trail-cloud-watch-logs-enabled`](https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-cloud-watch-logs-enabled.html) +**AWS Config rule:** [cloud-trail-cloud-watch-logs-enabled](https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-cloud-watch-logs-enabled.html) @@ -272 +270 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | `No default value` +`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | `No default value`