AWS securityhub documentation change
Summary
Updated FSBP standard documentation with expanded descriptions, removed version number, and rephrased control applicability
Security assessment
The changes improve clarity about the purpose and scope of the FSBP standard but do not address a specific security vulnerability. Adds general security guidance documentation.
Diff
diff --git a/securityhub/latest/userguide/fsbp-standard.md b/securityhub/latest/userguide/fsbp-standard.md index a2bb8ab7e..6c7c279be 100644 --- a//securityhub/latest/userguide/fsbp-standard.md +++ b//securityhub/latest/userguide/fsbp-standard.md @@ -5 +5 @@ -Controls that apply to the FSBP standard +Controls that apply to the standard @@ -7 +7 @@ Controls that apply to the FSBP standard -# AWS Foundational Security Best Practices v1.0.0 (FSBP) standard +# AWS Foundational Security Best Practices standard in Security Hub @@ -9 +9 @@ Controls that apply to the FSBP standard -The AWS Foundational Security Best Practices (FSBP) standard is a set of controls that detect when your AWS accounts and resources deviate from security best practices. +Developed by AWS and industry professionals, the AWS Foundational Security Best Practices (FSBP) standard is a compilation of security best practices for organizations, regardless of organization sector or size. It provides a set of controls that detect when AWS accounts and resources deviate from security best practices. It also provides prescriptive guidance about how to improve and maintain your organization's security posture. @@ -11 +11 @@ The AWS Foundational Security Best Practices (FSBP) standard is a set of control -The standard lets you continuously evaluate all of your AWS accounts and workloads to quickly identify areas of deviation from best practices. It provides actionable and prescriptive guidance about how to improve and maintain your organization’s security posture. +In AWS Security Hub, the AWS Foundational Security Best Practices standard includes controls that continuously evaluate your AWS accounts and workloads, and help you identify areas that deviate from security best practices. The controls include security best practices for resources from multiple AWS services. Each control is assigned a category that reflects the security function that the control applies to. For a list of categories and additional details, see [Control categories](./control-categories.html). @@ -13 +13 @@ The standard lets you continuously evaluate all of your AWS accounts and workloa -The controls include security best practices for resources from multiple AWS services. Each control is also assigned a category that reflects the security function that it applies to. For more information, see [List of control categories in Security Hub](./control-categories.html). +## Controls that apply to the standard @@ -15 +15 @@ The controls include security best practices for resources from multiple AWS ser -## Controls that apply to the FSBP standard +The following list specifies which AWS Security Hub controls apply to the AWS Foundational Security Best Practices standard (v1.0.0). To review the details of a control, choose the control. @@ -659 +659 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Security Hub standards reference +Standards reference @@ -661 +661 @@ Security Hub standards reference -CIS AWS Foundations Benchmark +AWS Resource Tagging