AWS securityhub documentation change
Summary
Clarified that Security Hub findings include both standard-specific control IDs and security control IDs when consolidation is disabled.
Security assessment
The change provides additional clarity about metadata in findings but does not address security vulnerabilities or introduce new security features.
Diff
diff --git a/securityhub/latest/userguide/asff-changes-consolidation.md b/securityhub/latest/userguide/asff-changes-consolidation.md index f252f1fb8..bddec259e 100644 --- a//securityhub/latest/userguide/asff-changes-consolidation.md +++ b//securityhub/latest/userguide/asff-changes-consolidation.md @@ -568 +568 @@ Consolidated controls view and consolidated control findings standardize control -The Security Hub console displays standard-agnostic security control IDs and security control titles, regardless of whether consolidated control findings is turned on or off in your account. However, Security Hub findings contain standard-specific control titles (for PCI and CIS v1.2.0) if consolidated control findings is turned off in your account. If consolidated control findings is turned off in your account, Security Hub findings contain the standard-specific control ID and the security control ID. For more information about how consolidation impacts control findings, see [Sample control findings in Security Hub](./sample-control-findings.html). +The Security Hub console displays standard-agnostic security control IDs and security control titles, regardless of whether consolidated control findings is turned on or off in your account. However, Security Hub findings contain standard-specific control titles (for PCI and CIS v1.2.0) if consolidated control findings is turned off in your account. In addition, Security Hub findings contain the standard-specific control ID and the security control ID. For more information about how consolidation impacts control findings, see [Sample control findings in Security Hub](./sample-control-findings.html).