AWS securityhub documentation change
Summary
Clarified finding history retention period and added note about tracking up to 20 most recent changes
Security assessment
Change adds operational clarity about history tracking limits but doesn't address vulnerabilities or document new security features
Diff
diff --git a/securityhub/latest/userguide/securityhub-findings-viewing.md b/securityhub/latest/userguide/securityhub-findings-viewing.md index 5b75a460d..9233531b2 100644 --- a//securityhub/latest/userguide/securityhub-findings-viewing.md +++ b//securityhub/latest/userguide/securityhub-findings-viewing.md @@ -46 +46 @@ The **Tags** row shows tag key and value information for the resources involved -This tab tracks the history of a finding in the last 90 days. Finding history is available for active and archived findings. It provides an immutable trail of changes made to a finding over time, including what AWS Security Finding Format (ASFF) field changed, when the change occurred, and by which user. More recent changes are displayed first. If you're signed in to a Security Hub administrator account, the finding history shown is for the administrator account and all member accounts. +This tab tracks the history of a finding for the past 90 days. Finding history is available for active and archived findings. It provides an immutable trail of changes made to a finding over time, including what AWS Security Finding Format (ASFF) field changed, when the change occurred, and by which user. More recent changes are displayed first. If you're signed in to a Security Hub administrator account, the finding history shown is for the administrator account and all member accounts. @@ -48 +48 @@ This tab tracks the history of a finding in the last 90 days. Finding history is -Finding history includes changes that a user made manually or automatically through [Security Hub automation rules](./automation-rules.html). However, finding history doesn't include changes to top-level timestamp fields, such as `CreatedAt` and `UpdatedAt`. +Finding history includes changes that a user made manually or automatically through [Security Hub automation rules](./automation-rules.html), for up to 20 of the changes that were most recently made. Finding history doesn't include changes to top-level timestamp fields, such as the `CreatedAt` and `UpdatedAt` fields.