AWS securityhub documentation change
Summary
Updated documentation to rebrand Security Hub features as 'Security Hub CSPM' (Cloud Security Posture Management) throughout the document. Changed terminology from general Security Hub management to CSPM-specific administration, updated links, and adjusted section headers to emphasize CSPM capabilities.
Security assessment
The changes emphasize CSPM (Cloud Security Posture Management), which is a security-focused service, but there's no evidence of addressing a specific vulnerability or incident. The updates appear to be rebranding/documentation refinement rather than patching a security issue. However, they do add explicit documentation about CSPM security posture management features.
Diff
diff --git a/securityhub/latest/userguide/securityhub-accounts-orgs.md b/securityhub/latest/userguide/securityhub-accounts-orgs.md index 003a46d9d..9b25646d2 100644 --- a//securityhub/latest/userguide/securityhub-accounts-orgs.md +++ b//securityhub/latest/userguide/securityhub-accounts-orgs.md @@ -3 +3 @@ -[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[User Guide](what-is-securityhub.html) +[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-security-hub-adv.html) @@ -5 +5 @@ -# Managing Security Hub administrator and member accounts with Organizations +# Managing Security Hub CSPM for multiple accounts with AWS Organizations @@ -7 +7 @@ -You can integrate AWS Security Hub with AWS Organizations, and then manage Security Hub for accounts in your organization. +You can integrate AWS Security Hub Cloud Security Posture Management (CSPM) with AWS Organizations, and then manage Security Hub CSPM for accounts in your organization. @@ -9 +9 @@ You can integrate AWS Security Hub with AWS Organizations, and then manage Secur -To integrate Security Hub with AWS Organizations, you create an organization in AWS Organizations. The Organizations management account designates one account as the Security Hub delegated administrator for the organization. The delegated administrator can then enable Security Hub for other accounts in the organization, add those accounts as Security Hub member accounts, and take allowed actions on the member accounts. The Security Hub delegated administrator can enable and manage Security Hub for up to 10,000 member accounts. +To integrate Security Hub CSPM with AWS Organizations, you create an organization in AWS Organizations. The Organizations management account designates one account as the Security Hub CSPM delegated administrator for the organization. The delegated administrator can then enable Security Hub CSPM for other accounts in the organization, add those accounts as Security Hub CSPM member accounts, and take allowed actions on the member accounts. The Security Hub CSPM delegated administrator can enable and manage Security Hub CSPM for up to 10,000 member accounts. @@ -11 +11 @@ To integrate Security Hub with AWS Organizations, you create an organization in -The extent of the delegated administrator's configuration abilities depend on whether you use [central configuration](./central-configuration-intro.html). With central configuration enabled, you don't need to configure Security Hub separately in each member account and AWS Region. The delegated administrator can enforce specific Security Hub settings in specified member accounts and organizational units (OUs) across Regions. +The extent of the delegated administrator's configuration abilities depend on whether you use [central configuration](./central-configuration-intro.html). With central configuration enabled, you don't need to configure Security Hub CSPM separately in each member account and AWS Region. The delegated administrator can enforce specific Security Hub CSPM settings in specified member accounts and organizational units (OUs) across Regions. @@ -13 +13 @@ The extent of the delegated administrator's configuration abilities depend on wh -The Security Hub delegated administrator account can perform the following actions on member accounts: +The Security Hub CSPM delegated administrator account can perform the following actions on member accounts: @@ -15 +15 @@ The Security Hub delegated administrator account can perform the following actio - * If using central configuration, centrally configure Security Hub for member accounts and OUs by creating Security Hub configuration policies. Configuration policies can be used to enable and disable Security Hub, enable and disable standards, and enable and disable controls. + * If using central configuration, centrally configure Security Hub CSPM for member accounts and OUs by creating Security Hub CSPM configuration policies. Configuration policies can be used to enable and disable Security Hub CSPM, enable and disable standards, and enable and disable controls. @@ -17 +17 @@ The Security Hub delegated administrator account can perform the following actio - * Automatically treat _new_ accounts as Security Hub member accounts when they join the organization. If you use central configuration, a configuration policy that is associated with an OU includes existing and new accounts that are part of the OU. + * Automatically treat _new_ accounts as Security Hub CSPM member accounts when they join the organization. If you use central configuration, a configuration policy that is associated with an OU includes existing and new accounts that are part of the OU. @@ -19 +19 @@ The Security Hub delegated administrator account can perform the following actio - * Treat _existing_ organization accounts as Security Hub member accounts. This happens automatically if you use central configuration. + * Treat _existing_ organization accounts as Security Hub CSPM member accounts. This happens automatically if you use central configuration. @@ -21 +21 @@ The Security Hub delegated administrator account can perform the following actio - * Disassociate member accounts that belong to the organization. If you use central configuration, you can disassociate a member account only after designating it as self-managed. Alternatively, you can associate a configuration policy that disables Security Hub with specific centrally managed member accounts. + * Disassociate member accounts that belong to the organization. If you use central configuration, you can disassociate a member account only after designating it as self-managed. Alternatively, you can associate a configuration policy that disables Security Hub CSPM with specific centrally managed member accounts. @@ -26 +26 @@ The Security Hub delegated administrator account can perform the following actio -If you don't opt in to central configuration, your organization uses the default configuration type called local configuration. Under local configuration, the delegated administrator has a more limited ability to enforce settings in member accounts. For more information, see [Understanding local configuration in Security Hub](./local-configuration.html). +If you don't opt in to central configuration, your organization uses the default configuration type called local configuration. Under local configuration, the delegated administrator has a more limited ability to enforce settings in member accounts. For more information, see [Understanding local configuration in Security Hub CSPM](./local-configuration.html). @@ -28 +28 @@ If you don't opt in to central configuration, your organization uses the default -For a full list of actions that the delegated administrator can perform on member accounts, see [Allowed actions by administrator and member accounts in Security Hub](./securityhub-accounts-allowed-actions.html). +For a full list of actions that the delegated administrator can perform on member accounts, see [Allowed actions by administrator and member accounts in Security Hub CSPM](./securityhub-accounts-allowed-actions.html). @@ -30 +30 @@ For a full list of actions that the delegated administrator can perform on membe -The topics in this section explain how to integrate Security Hub with AWS Organizations and how to manage Security Hub for accounts in an organization. Where relevant, each section identifies management benefits and differences for users of central configuration. +The topics in this section explain how to integrate Security Hub CSPM with AWS Organizations and how to manage Security Hub CSPM for accounts in an organization. Where relevant, each section identifies management benefits and differences for users of central configuration. @@ -34 +34 @@ The topics in this section explain how to integrate Security Hub with AWS Organi - * [Integrating Security Hub with AWS Organizations](./designate-orgs-admin-account.html) + * [Integrating Security Hub CSPM with AWS Organizations](./designate-orgs-admin-account.html) @@ -36 +36 @@ The topics in this section explain how to integrate Security Hub with AWS Organi - * [Automatically enabling Security Hub in new organization accounts](./accounts-orgs-auto-enable.html) + * [Automatically enabling Security Hub CSPM in new organization accounts](./accounts-orgs-auto-enable.html) @@ -38 +38 @@ The topics in this section explain how to integrate Security Hub with AWS Organi - * [Manually enabling Security Hub in new organization accounts](./orgs-accounts-enable.html) + * [Manually enabling Security Hub CSPM in new organization accounts](./orgs-accounts-enable.html) @@ -40 +40 @@ The topics in this section explain how to integrate Security Hub with AWS Organi - * [Disassociating Security Hub member accounts from your organization](./accounts-orgs-disassociate.html) + * [Disassociating Security Hub CSPM member accounts from your organization](./accounts-orgs-disassociate.html) @@ -53 +53 @@ Recommendations for multi-account environments -Integrating Security Hub with AWS Organizations +Integrating with AWS Organizations