AWS securityhub documentation change
Summary
Updated documentation to reflect rebranding of 'Security Hub' to 'Security Hub CSPM' (Cloud Security Posture Management) throughout the file, emphasizing integration with AWS Organizations for account management
Security assessment
The changes focus on clarifying the product name (CSPM) and its organizational integration process. While CSPM is a security-related feature, there's no evidence of addressing a specific vulnerability. The updates enhance documentation about security posture management capabilities.
Diff
diff --git a/securityhub/latest/userguide/accounts-transition-to-orgs.md b/securityhub/latest/userguide/accounts-transition-to-orgs.md index 1ae01f5fe..eccaf8597 100644 --- a//securityhub/latest/userguide/accounts-transition-to-orgs.md +++ b//securityhub/latest/userguide/accounts-transition-to-orgs.md @@ -3 +3 @@ -[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[User Guide](what-is-securityhub.html) +[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-security-hub-adv.html) @@ -5 +5 @@ -Integrating Security Hub with AWS Organizations +Integrating Security Hub CSPM with AWS Organizations @@ -7 +7 @@ Integrating Security Hub with AWS Organizations -# Transitioning to Organizations to manage accounts in Security Hub +# Transitioning to Organizations to manage accounts in Security Hub CSPM @@ -9 +9 @@ Integrating Security Hub with AWS Organizations -When you manage accounts manually in AWS Security Hub, you must invite prospective member accounts and configure each member account separately in each AWS Region. +When you manage accounts manually in AWS Security Hub Cloud Security Posture Management (CSPM), you must invite prospective member accounts and configure each member account separately in each AWS Region. @@ -11 +11 @@ When you manage accounts manually in AWS Security Hub, you must invite prospecti -By integrating Security Hub and AWS Organizations, you can eliminate the need to send invitations and gain more control over how Security Hub is configured and customized in your organization. For this reason, we recommend using AWS Organizations instead of Security Hub invitations to manage your member accounts. For information, see [Managing Security Hub administrator and member accounts with Organizations](./securityhub-accounts-orgs.html). +By integrating Security Hub CSPM and AWS Organizations, you can eliminate the need to send invitations and gain more control over how Security Hub CSPM is configured and customized in your organization. For this reason, we recommend using AWS Organizations instead of Security Hub CSPM invitations to manage your member accounts. For information, see [Managing Security Hub CSPM for multiple accounts with AWS Organizations](./securityhub-accounts-orgs.html). @@ -13 +13 @@ By integrating Security Hub and AWS Organizations, you can eliminate the need to -It's possible to use a combined approach in which you use the AWS Organizations integration, but also manually invite accounts outside of your organization. However, we recommend exclusively using the Organizations integration. [Central configuration](./central-configuration-intro.html), a feature which helps you manage Security Hub across multiple accounts and Regions, is only available when you integrate with Organizations. +It's possible to use a combined approach in which you use the AWS Organizations integration, but also manually invite accounts outside of your organization. However, we recommend exclusively using the Organizations integration. [Central configuration](./central-configuration-intro.html), a feature which helps you manage Security Hub CSPM across multiple accounts and Regions, is only available when you integrate with Organizations. @@ -17 +17 @@ This section covers how you can transition from manual invitation-based account -## Integrating Security Hub with AWS Organizations +## Integrating Security Hub CSPM with AWS Organizations @@ -19 +19 @@ This section covers how you can transition from manual invitation-based account -First, you must integrate Security Hub and AWS Organizations. +First, you must integrate Security Hub CSPM and AWS Organizations. @@ -25 +25 @@ You can integrate these services by completing the following steps: - * From the Organizations management account, designate a Security Hub delegated administrator account. + * From the Organizations management account, designate a Security Hub CSPM delegated administrator account. @@ -34 +34 @@ The organization management account _cannot_ be set as the DA account. -For detailed instructions, see [Integrating Security Hub with AWS Organizations](./designate-orgs-admin-account.html). +For detailed instructions, see [Integrating Security Hub CSPM with AWS Organizations](./designate-orgs-admin-account.html). @@ -36 +36 @@ For detailed instructions, see [Integrating Security Hub with AWS Organizations] -By completing the preceding steps, you grant [trusted access](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-securityhub.html#integrate-enable-ta-securityhub) for Security Hub in AWS Organizations. This also enables Security Hub in the current AWS Region for the delegated administrator account. +By completing the preceding steps, you grant [trusted access](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-securityhub.html#integrate-enable-ta-securityhub) for Security Hub CSPM in AWS Organizations. This also enables Security Hub CSPM in the current AWS Region for the delegated administrator account. @@ -38 +38 @@ By completing the preceding steps, you grant [trusted access](https://docs.aws.a -The delegated administrator can manage the organization in Security Hub, primarily by adding the organization’s accounts as Security Hub member accounts. The administrator can also access certain Security Hub settings, data, and resources for those accounts. +The delegated administrator can manage the organization in Security Hub CSPM, primarily by adding the organization’s accounts as Security Hub CSPM member accounts. The administrator can also access certain Security Hub CSPM settings, data, and resources for those accounts. @@ -40 +40 @@ The delegated administrator can manage the organization in Security Hub, primari -When you transition to account management using Organizations, invitation-based accounts don't automatically become Security Hub members. Only the accounts that you add to your new organization can become Security Hub members. +When you transition to account management using Organizations, invitation-based accounts don't automatically become Security Hub CSPM members. Only the accounts that you add to your new organization can become Security Hub CSPM members. @@ -42 +42 @@ When you transition to account management using Organizations, invitation-based -After activating the integration, you can manage accounts with Organizations. For information, see [Managing Security Hub administrator and member accounts with Organizations](./securityhub-accounts-orgs.html). Account management varies based on your organization's configuration type. +After activating the integration, you can manage accounts with Organizations. For information, see [Managing Security Hub CSPM for multiple accounts with AWS Organizations](./securityhub-accounts-orgs.html). Account management varies based on your organization's configuration type. @@ -50 +50 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Disassociating from a Security Hub administrator account +Disassociating from an administrator account