AWS securityhub documentation change
Summary
Added CSPM references throughout permissions documentation, including in title, API references, and console context
Security assessment
Explicitly documents permissions required for Cloud Security Posture Management (CSPM) features, enhancing security feature documentation
Diff
diff --git a/securityhub/latest/userguide/iam-permissions-controls-standards.md b/securityhub/latest/userguide/iam-permissions-controls-standards.md index ac6dc43bf..bf04cfb57 100644 --- a//securityhub/latest/userguide/iam-permissions-controls-standards.md +++ b//securityhub/latest/userguide/iam-permissions-controls-standards.md @@ -3 +3 @@ -[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[User Guide](what-is-securityhub.html) +[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-security-hub-adv.html) @@ -5 +5 @@ -# Required permissions to configure controls +# Required permissions to configure controls in Security Hub CSPM @@ -7 +7 @@ -To view information about security controls and enable and disable security controls in standards, the AWS Identity and Access Management (IAM) role that you use to access AWS Security Hub needs permissions to call the following operations of the Security Hub API. +To view information about security controls and enable and disable security controls in standards, the AWS Identity and Access Management (IAM) role that you use to access AWS Security Hub Cloud Security Posture Management (CSPM) needs permissions to call the following operations of the Security Hub CSPM API. @@ -9 +9 @@ To view information about security controls and enable and disable security cont -To get the necessary permissions, you can use [Security Hub managed policies](https://docs.aws.amazon.com/securityhub/latest/userguide/security-iam-awsmanpol.html). Alternatively, you can update custom IAM policies to include permissions for these actions. +To get the necessary permissions, you can use [Security Hub CSPM managed policies](https://docs.aws.amazon.com/securityhub/latest/userguide/security-iam-awsmanpol.html). Alternatively, you can update custom IAM policies to include permissions for these actions. @@ -30 +30 @@ To get the necessary permissions, you can use [Security Hub managed policies](ht -In addition to the preceding APIs, you should add permission to call `BatchGetControlEvaluations` to your IAM role. This permission is necessary to view the enablement and compliance status of a control, the findings count for a control, and the overall security score for controls on the Security Hub console. Because only the console calls `BatchGetControlEvaluations`, this permission doesn't directly correspond to publicly documented Security Hub APIs or AWS CLI commands. +In addition to the preceding APIs, you should add permission to call `BatchGetControlEvaluations` to your IAM role. This permission is necessary to view the enablement and compliance status of a control, the findings count for a control, and the overall security score for controls on the Security Hub CSPM console. Because only the console calls `BatchGetControlEvaluations`, this permission doesn't directly correspond to publicly documented Security Hub CSPM APIs or AWS CLI commands.