AWS securityhub documentation change
Summary
Updated references from 'Security Hub' to 'Security Hub CSPM' throughout the document, modified documentation links, and clarified terminology related to Cloud Security Posture Management (CSPM) integration with EventBridge.
Security assessment
The changes primarily involve rebranding and terminology updates (adding 'CSPM' to product names) rather than addressing security vulnerabilities or introducing new security features. While CSPM is a security-related service, the modifications are documentation clarifications rather than responses to security issues or additions of security guidance. No evidence of vulnerability fixes or security incident responses is present.
Diff
diff --git a/securityhub/latest/userguide/securityhub-cwe-integration-types.md b/securityhub/latest/userguide/securityhub-cwe-integration-types.md index f1dff000e..ae0d1bd8e 100644 --- a//securityhub/latest/userguide/securityhub-cwe-integration-types.md +++ b//securityhub/latest/userguide/securityhub-cwe-integration-types.md @@ -3 +3 @@ -[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[User Guide](what-is-securityhub.html) +[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-security-hub-adv.html) @@ -7 +7 @@ All findings (Security Hub Findings - Imported)Findings for custom actions (Secu -# Security Hub event types in EventBridge +# Security Hub CSPM event types in EventBridge @@ -9 +9 @@ All findings (Security Hub Findings - Imported)Findings for custom actions (Secu -Security Hub uses the following Amazon EventBridge event types to integrate with EventBridge. +Security Hub CSPM uses the following Amazon EventBridge event types to integrate with EventBridge. @@ -11 +11 @@ Security Hub uses the following Amazon EventBridge event types to integrate with -On the EventBridge dashboard for Security Hub, **All Events** includes all of these event types. +On the EventBridge dashboard for Security Hub CSPM, **All Events** includes all of these event types. @@ -15 +15 @@ On the EventBridge dashboard for Security Hub, **All Events** includes all of th -Security Hub automatically sends all new findings and all updates to existing findings to EventBridge as **Security Hub Findings - Imported** events. Each **Security Hub Findings - Imported** event contains a single finding. +Security Hub CSPM automatically sends all new findings and all updates to existing findings to EventBridge as **Security Hub Findings - Imported** events. Each **Security Hub Findings - Imported** event contains a single finding. @@ -21 +21 @@ For administrator accounts, the event feed in EventBridge includes events for fi -In an aggregation Region, the event feed includes events for findings from the aggregation Region and the linked Regions. Cross-Region findings are included in the event feed in near real time. For information on how to configure finding aggregation, see [Understanding cross-Region aggregation in Security Hub](./finding-aggregation.html). +In an aggregation Region, the event feed includes events for findings from the aggregation Region and the linked Regions. Cross-Region findings are included in the event feed in near real time. For information on how to configure finding aggregation, see [Understanding cross-Region aggregation in Security Hub CSPM](./finding-aggregation.html). @@ -27 +27 @@ You use this method to automatically send all findings, or all findings that hav -See [Configuring an EventBridge rule for Security Hub findings](./securityhub-cwe-all-findings.html). +See [Configuring an EventBridge rule for Security Hub CSPM findings](./securityhub-cwe-all-findings.html). @@ -31 +31 @@ See [Configuring an EventBridge rule for Security Hub findings](./securityhub-cw -Security Hub also sends findings that are associated with custom actions to EventBridge as **Security Hub Findings - Custom Action** events. +Security Hub CSPM also sends findings that are associated with custom actions to EventBridge as **Security Hub Findings - Custom Action** events. @@ -33 +33 @@ Security Hub also sends findings that are associated with custom actions to Even -This is useful for analysts working with the Security Hub console who want to send a specific finding, or a small set of findings, to a response or remediation workflow. You can select a custom action for up to 20 findings at a time. Each finding is sent to EventBridge as a separate EventBridge event. +This is useful for analysts working with the Security Hub CSPM console who want to send a specific finding, or a small set of findings, to a response or remediation workflow. You can select a custom action for up to 20 findings at a time. Each finding is sent to EventBridge as a separate EventBridge event. @@ -39 +39 @@ See [Using custom actions to send findings and insight results to EventBridge](. -For example, you can create a custom action in Security Hub called `send_to_ticketing`. Then in EventBridge, you create a rule that is triggered when EventBridge receives a finding that includes the `send_to_ticketing` custom action ID. The rule includes logic to send the finding to your ticketing system. You can then select findings within Security Hub and use the custom action in Security Hub to manually send findings to your ticketing system. +For example, you can create a custom action in Security Hub CSPM called `send_to_ticketing`. Then in EventBridge, you create a rule that is triggered when EventBridge receives a finding that includes the `send_to_ticketing` custom action ID. The rule includes logic to send the finding to your ticketing system. You can then select findings within Security Hub CSPM and use the custom action in Security Hub CSPM to manually send findings to your ticketing system. @@ -41 +41 @@ For example, you can create a custom action in Security Hub called `send_to_tick -For examples of how to send Security Hub findings to EventBridge for further processing, see [How to Integrate AWS Security Hub Custom Actions with PagerDuty](https://aws.amazon.com/blogs/apn/how-to-integrate-aws-security-hub-custom-actions-with-pagerduty/) and [How to Enable Custom Actions in AWS Security Hub](https://aws.amazon.com/blogs/apn/how-to-enable-custom-actions-in-aws-security-hub/) on the AWS Partner Network (APN) Blog. +For examples of how to send Security Hub CSPM findings to EventBridge for further processing, see [How to Integrate AWS Security Hub Cloud Security Posture Management (CSPM) Custom Actions with PagerDuty](https://aws.amazon.com/blogs/apn/how-to-integrate-aws-security-hub-custom-actions-with-pagerduty/) and [How to Enable Custom Actions in AWS Security Hub Cloud Security Posture Management (CSPM)](https://aws.amazon.com/blogs/apn/how-to-enable-custom-actions-in-aws-security-hub/) on the AWS Partner Network (APN) Blog. @@ -47 +47 @@ You can also use custom actions to send sets of insight results to EventBridge a -Similar to custom actions for findings, you first create the custom action in Security Hub, and then create a rule in EventBridge. +Similar to custom actions for findings, you first create the custom action in Security Hub CSPM, and then create a rule in EventBridge.