AWS securityhub documentation change
Summary
Updated control check from verifying CloudWatch metrics to requiring logging enabled, along with minor text consolidation and title adjustment
Security assessment
The change emphasizes enabling logging for audit trails, which improves security monitoring but does not address a specific vulnerability. The update enhances security documentation by clarifying logging requirements.
Diff
diff --git a/securityhub/latest/userguide/athena-controls.md b/securityhub/latest/userguide/athena-controls.md index 3962191cd..17b50d836 100644 --- a//securityhub/latest/userguide/athena-controls.md +++ b//securityhub/latest/userguide/athena-controls.md @@ -7 +7 @@ -# Security Hub controls for Athena +# Security Hub controls for Amazon Athena @@ -9,3 +9 @@ -These Security Hub controls evaluate the Amazon Athena service and resources. - -These controls may not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). +These AWS Security Hub controls evaluate the Amazon Athena service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). @@ -115 +113 @@ To add tags to an Athena workgroup, see [Adding and deleting tags on an individu -This control checks whether an Amazon Athena workgroup publishes usage metrics to Amazon CloudWatch. The control fails if the workgroup doesn't publish usage metrics to CloudWatch. +This control checks whether an Amazon Athena workgroup has logging enabled. The control fails if the workgroup doesn't have logging enabled. @@ -121 +119 @@ Audit logs track and monitor system activities. They provide a record of events -To enable or disable query metrics for an Athena workgroup, see [Enable CloudWatch query metrics in Athena](https://docs.aws.amazon.com/athena/latest/ug/athena-cloudwatch-metrics-enable.html) in the _Amazon Athena User Guide_. +For information about enabling logging for an Athena workgroup, see [Enable CloudWatch query metrics in Athena](https://docs.aws.amazon.com/athena/latest/ug/athena-cloudwatch-metrics-enable.html) in the _Amazon Athena User Guide_.