AWS securityhub documentation change
Summary
Updated documentation to replace 'Security Hub' with 'Security Hub CSPM' throughout, reflecting product naming changes for Cloud Security Posture Management features. Updated console/API references and navigation paths.
Security assessment
Changes primarily involve rebranding terminology to 'Security Hub CSPM' without introducing new security concepts or addressing vulnerabilities. Modifications focus on administrative process documentation rather than security controls or vulnerability mitigation.
Diff
diff --git a/securityhub/latest/userguide/remove-admin-overview.md b/securityhub/latest/userguide/remove-admin-overview.md index 47c9a8a46..292085e6c 100644 --- a//securityhub/latest/userguide/remove-admin-overview.md +++ b//securityhub/latest/userguide/remove-admin-overview.md @@ -3 +3 @@ -[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[User Guide](what-is-securityhub.html) +[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-security-hub-adv.html) @@ -5 +5 @@ -Removing the delegated administrator (Organizations API, AWS CLI)Removing the delegated administrator (Security Hub console)Removing the delegated administrator (Security Hub API, AWS CLI) +Removing the delegated administrator (Organizations API, AWS CLI)Removing the delegated administrator (Security Hub CSPM console)Removing the delegated administrator (Security Hub CSPM API, AWS CLI) @@ -9 +9 @@ Removing the delegated administrator (Organizations API, AWS CLI)Removing the de -Only the organization management account can remove the delegated Security Hub administrator account. +Only the organization management account can remove the delegated Security Hub CSPM administrator account. @@ -11 +11 @@ Only the organization management account can remove the delegated Security Hub a -To change the delegated Security Hub administrator, you must first remove the current delegated administrator account and then designate a new one. +To change the delegated Security Hub CSPM administrator, you must first remove the current delegated administrator account and then designate a new one. @@ -15 +15 @@ To change the delegated Security Hub administrator, you must first remove the cu -When you use [central configuration](./central-configuration-intro.html), you can't use the Security Hub console or Security Hub APIs to change or remove the delegated administrator account. If the organization management account uses the AWS Organizations console or AWS Organizations APIs to change or remove the delegated Security Hub administrator, Security Hub automatically stops central configuration, and deletes your configuration policies and policy associations. Member accounts retain the configurations they had before the delegated administrator was changed or removed. +When you use [central configuration](./central-configuration-intro.html), you can't use the Security Hub CSPM console or Security Hub CSPM APIs to change or remove the delegated administrator account. If the organization management account uses the AWS Organizations console or AWS Organizations APIs to change or remove the delegated Security Hub CSPM administrator, Security Hub CSPM automatically stops central configuration, and deletes your configuration policies and policy associations. Member accounts retain the configurations they had before the delegated administrator was changed or removed. @@ -17 +17 @@ When you use [central configuration](./central-configuration-intro.html), you ca -If you use the Security Hub console to remove the delegated administrator in one Region, it is automatically removed in all Regions. +If you use the Security Hub CSPM console to remove the delegated administrator in one Region, it is automatically removed in all Regions. @@ -19 +19 @@ If you use the Security Hub console to remove the delegated administrator in one -The Security Hub API only removes the delegated Security Hub administrator account from the Region where the API call or command is issued. You must repeat the action in other Regions. +The Security Hub CSPM API only removes the delegated Security Hub CSPM administrator account from the Region where the API call or command is issued. You must repeat the action in other Regions. @@ -21 +21 @@ The Security Hub API only removes the delegated Security Hub administrator accou -If you use the Organizations API to remove the delegated Security Hub administrator account, it is automatically removed in all Regions. +If you use the Organizations API to remove the delegated Security Hub CSPM administrator account, it is automatically removed in all Regions. @@ -25 +25 @@ If you use the Organizations API to remove the delegated Security Hub administra -You can use Organizations to remove the delegated Security Hub administrator in all Regions. +You can use Organizations to remove the delegated Security Hub CSPM administrator in all Regions. @@ -29 +29 @@ If you use central configuration to manage accounts, removing the delegated admi -Choose your preferred method, and follow the instructions to remove the delegated Security Hub administrator account with AWS Organizations. +Choose your preferred method, and follow the instructions to remove the delegated Security Hub CSPM administrator account with AWS Organizations. @@ -34 +34 @@ Organizations API, AWS CLI -**To remove the delegated Security Hub administrator** +**To remove the delegated Security Hub CSPM administrator** @@ -36 +36 @@ Organizations API, AWS CLI -From the organization management account, use the [DeregisterDelegatedAdministrator](https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeregisterDelegatedAdministrator.html) operation of the Organizations API. If you're using the AWS CLI, run the [deregister-delegated-administrator](https://docs.aws.amazon.com/cli/latest/reference/organizations/deregister-delegated-administrator.html) command. Provide the account ID of the delegated administrator, and the service principal for Security Hub, which is `securityhub.amazonaws.com`. +From the organization management account, use the [DeregisterDelegatedAdministrator](https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeregisterDelegatedAdministrator.html) operation of the Organizations API. If you're using the AWS CLI, run the [deregister-delegated-administrator](https://docs.aws.amazon.com/cli/latest/reference/organizations/deregister-delegated-administrator.html) command. Provide the account ID of the delegated administrator, and the service principal for Security Hub CSPM, which is `securityhub.amazonaws.com`. @@ -38 +38 @@ From the organization management account, use the [DeregisterDelegatedAdministra -The following example removes the delegated Security Hub administrator. This example is formatted for Linux, macOS, or Unix, and it uses the backslash (\\) line-continuation character to improve readability. +The following example removes the delegated Security Hub CSPM administrator. This example is formatted for Linux, macOS, or Unix, and it uses the backslash (\\) line-continuation character to improve readability. @@ -43 +43 @@ The following example removes the delegated Security Hub administrator. This exa -## Removing the delegated administrator (Security Hub console) +## Removing the delegated administrator (Security Hub CSPM console) @@ -45 +45 @@ The following example removes the delegated Security Hub administrator. This exa -You can use the Security Hub console to remove the delegated Security Hub administrator in all Regions. +You can use the Security Hub CSPM console to remove the delegated Security Hub CSPM administrator in all Regions. @@ -47 +47 @@ You can use the Security Hub console to remove the delegated Security Hub admini -When the delegated Security Hub administrator account is removed, the member accounts are disassociated from the removed delegated Security Hub administrator account. +When the delegated Security Hub CSPM administrator account is removed, the member accounts are disassociated from the removed delegated Security Hub CSPM administrator account. @@ -49 +49 @@ When the delegated Security Hub administrator account is removed, the member acc -Security Hub is still enabled in the member accounts. They become standalone accounts until a new Security Hub administrator enables them as member accounts. +Security Hub CSPM is still enabled in the member accounts. They become standalone accounts until a new Security Hub CSPM administrator enables them as member accounts. @@ -51 +51 @@ Security Hub is still enabled in the member accounts. They become standalone acc -If the organization management account isn't an enabled account in Security Hub, then use the option on the **Welcome to Security Hub** page. +If the organization management account isn't an enabled account in Security Hub CSPM, then use the option on the **Welcome to Security Hub CSPM** page. @@ -53 +53 @@ If the organization management account isn't an enabled account in Security Hub, -###### To remove the delegated Security Hub administrator account from the **Welcome to Security Hub** page +###### To remove the delegated Security Hub CSPM administrator account from the **Welcome to Security Hub CSPM** page @@ -55 +55 @@ If the organization management account isn't an enabled account in Security Hub, - 1. Open the AWS Security Hub console at [https://console.aws.amazon.com/securityhub/](https://console.aws.amazon.com/securityhub/). + 1. Open the AWS Security Hub Cloud Security Posture Management (CSPM) console at [https://console.aws.amazon.com/securityhub/](https://console.aws.amazon.com/securityhub/). @@ -66 +66 @@ If the organization management account is an enabled account in **Security Hub** -###### To remove the delegated Security Hub administrator account from the **Settings** page +###### To remove the delegated Security Hub CSPM administrator account from the **Settings** page @@ -68 +68 @@ If the organization management account is an enabled account in **Security Hub** - 1. Open the AWS Security Hub console at [https://console.aws.amazon.com/securityhub/](https://console.aws.amazon.com/securityhub/). + 1. Open the AWS Security Hub Cloud Security Posture Management (CSPM) console at [https://console.aws.amazon.com/securityhub/](https://console.aws.amazon.com/securityhub/). @@ -70 +70 @@ If the organization management account is an enabled account in **Security Hub** - 2. In the Security Hub navigation pane, choose **Settings**. Then choose **General**. + 2. In the Security Hub CSPM navigation pane, choose **Settings**. Then choose **General**. @@ -77 +77 @@ If the organization management account is an enabled account in **Security Hub** -## Removing the delegated administrator (Security Hub API, AWS CLI) +## Removing the delegated administrator (Security Hub CSPM API, AWS CLI) @@ -79 +79 @@ If the organization management account is an enabled account in **Security Hub** -You can use the Security Hub API or Security Hub operations for the AWS CLI to remove the delegated Security Hub administrator. When you remove the delegated administrator with one of these methods, it is only removed in the Region where the API call or command was issued. Security Hub doesn't update other Regions, and it doesn't remove the delegated administrator account in AWS Organizations. +You can use the Security Hub CSPM API or Security Hub CSPM operations for the AWS CLI to remove the delegated Security Hub CSPM administrator. When you remove the delegated administrator with one of these methods, it is only removed in the Region where the API call or command was issued. Security Hub CSPM doesn't update other Regions, and it doesn't remove the delegated administrator account in AWS Organizations. @@ -81 +81 @@ You can use the Security Hub API or Security Hub operations for the AWS CLI to r -Choose your preferred method, and follow these steps to remove the delegated Security Hub administrator account with Security Hub. +Choose your preferred method, and follow these steps to remove the delegated Security Hub CSPM administrator account with Security Hub CSPM. @@ -83 +83 @@ Choose your preferred method, and follow these steps to remove the delegated Sec -Security Hub API, AWS CLI +Security Hub CSPM API, AWS CLI @@ -86 +86 @@ Security Hub API, AWS CLI -**To remove the delegated Security Hub administrator** +**To remove the delegated Security Hub CSPM administrator** @@ -88 +88 @@ Security Hub API, AWS CLI -From the organization management account, use the [DisableOrganizationAdminAccount](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableOrganizationAdminAccount.html) operation of the Security Hub API. If you're using the AWS CLI, run the [disable-organization-admin-account](https://docs.aws.amazon.com/cli/latest/reference/securityhub/disable-organization-admin-account.html) command. Provide the account ID of the delegated Security Hub administrator. +From the organization management account, use the [DisableOrganizationAdminAccount](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableOrganizationAdminAccount.html) operation of the Security Hub CSPM API. If you're using the AWS CLI, run the [disable-organization-admin-account](https://docs.aws.amazon.com/cli/latest/reference/securityhub/disable-organization-admin-account.html) command. Provide the account ID of the delegated Security Hub CSPM administrator. @@ -90 +90 @@ From the organization management account, use the [DisableOrganizationAdminAccou -The following example removes the delegated Security Hub administrator. This example is formatted for Linux, macOS, or Unix, and it uses the backslash (\\) line-continuation character to improve readability. +The following example removes the delegated Security Hub CSPM administrator. This example is formatted for Linux, macOS, or Unix, and it uses the backslash (\\) line-continuation character to improve readability. @@ -101 +101 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Integrating Security Hub with AWS Organizations +Integrating with AWS Organizations