AWS securityhub documentation change
Summary
Clarified central configuration capabilities including enabling/disabling security standards/controls across accounts and OUs, and minor wording improvements
Security assessment
The changes enhance documentation about managing security configurations (standards/controls) across an organization, but do not address any specific security vulnerability or incident. The updates provide clearer instructions for security feature management rather than patching weaknesses.
Diff
diff --git a/securityhub/latest/userguide/central-configuration-intro.md b/securityhub/latest/userguide/central-configuration-intro.md index 854e1efc8..98c953ee4 100644 --- a//securityhub/latest/userguide/central-configuration-intro.md +++ b//securityhub/latest/userguide/central-configuration-intro.md @@ -9 +9 @@ Benefits of using central configurationWhen to use central configuration?Central -Central configuration is a Security Hub feature that helps you set up and manage Security Hub across multiple AWS accounts and AWS Regions. To use central configuration, you must first integrate Security Hub and AWS Organizations. You can integrate the services by creating an organization and designating a delegated Security Hub administrator account for the organization. +Central configuration is an AWS Security Hub feature that helps you set up and manage Security Hub across multiple AWS accounts and AWS Regions. To use central configuration, you must first integrate Security Hub and AWS Organizations. You can integrate the services by creating an organization and designating a delegated Security Hub administrator account for the organization. @@ -11 +11 @@ Central configuration is a Security Hub feature that helps you set up and manage -From the delegated Security Hub administrator account, you can specify how the Security Hub service, security standards, and security controls are configured in your organization accounts and organizational units (OUs) across Regions. You can configure these settings in just a few steps from one primary Region, referred to as the _home Region_. +From the delegated Security Hub administrator account, you can enable Security Hub for your organization’s accounts and organizational units (OUs) across Regions. You can also enable, configure, and disable individual security standards and security controls for accounts and OUs across Regions. You can configure these settings in just a few steps from one primary Region, referred to as the _home Region_. @@ -15 +15 @@ When you use central configuration, the delegated administrator can choose which -To configure centrally managed accounts, the delegated administrator uses Security Hub configuration policies. Configuration policies let the delegated administrator specify whether Security Hub is enabled or disabled, and which standards and controls are enabled and disabled. They can also be used to customize parameters of certain controls. +To configure centrally managed accounts, the delegated administrator uses Security Hub configuration policies. Configuration policies let the delegated administrator specify whether Security Hub is enabled or disabled, and which standards and controls are enabled or disabled. They can also be used to customize parameters for certain controls.