AWS Security ChangesHomeSearch

AWS securityhub documentation change

Service: securityhub · 2025-06-19 · Documentation low

File: securityhub/latest/userguide/tags-add.md

Summary

Updated documentation to reflect rebranding of 'Security Hub resources' to 'Security Hub CSPM resources' throughout the document, including references to console/API and addition of Cloud Security Posture Management (CSPM) terminology

Security assessment

The changes primarily involve terminology updates (adding CSPM references) and branding adjustments. No security vulnerabilities, mitigations, or new security features are introduced. Tags remain a resource management feature rather than a security control.

Diff

diff --git a/securityhub/latest/userguide/tags-add.md b/securityhub/latest/userguide/tags-add.md
index 85f98bcce..32ac978f9 100644
--- a//securityhub/latest/userguide/tags-add.md
+++ b//securityhub/latest/userguide/tags-add.md
@@ -3 +3 @@
-[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[User Guide](what-is-securityhub.html)
+[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-security-hub-adv.html)
@@ -5 +5 @@
-# Adding tags to Security Hub resources
+# Adding tags to Security Hub CSPM resources
@@ -7 +7 @@
-A _tag_ is a label that you can define and assign to AWS resources, including certain types of AWS Security Hub resources. By using tags, you can identify, categorize, and manage resources in different ways, such as by purpose, owner, environment, or other criteria. For example, you can use tags to: apply policies, allocate costs, distinguish between versions of resources, or identify resources that support certain compliance requirements or workflows.
+A _tag_ is a label that you can define and assign to AWS resources, including certain types of AWS Security Hub Cloud Security Posture Management (CSPM) resources. By using tags, you can identify, categorize, and manage resources in different ways, such as by purpose, owner, environment, or other criteria. For example, you can use tags to: apply policies, allocate costs, distinguish between versions of resources, or identify resources that support certain compliance requirements or workflows.
@@ -9 +9 @@ A _tag_ is a label that you can define and assign to AWS resources, including ce
-You can add tags to the following types of Security Hub resources:
+You can add tags to the following types of Security Hub CSPM resources:
@@ -22 +22 @@ A resource can have as many as 50 tags. Each tag consists of a required _tag key
-To add tags to a Security Hub resource, you can use the Security Hub console or the Security Hub API. However, the console doesn't support adding tags to the `Hub` resource.
+To add tags to a Security Hub CSPM resource, you can use the Security Hub CSPM console or the Security Hub CSPM API. However, the console doesn't support adding tags to the `Hub` resource.
@@ -26 +26 @@ After adding tags, you can edit the tag and change the tag key or tag value.
-To add or edit tags for multiple Security Hub resources at the same time, use the tagging operations of the [AWS Resource Groups Tagging API](https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/overview.html).
+To add or edit tags for multiple Security Hub CSPM resources at the same time, use the tagging operations of the [AWS Resource Groups Tagging API](https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/overview.html).
@@ -35 +35 @@ Console
-**To add tags to a Security Hub resource (console)**
+**To add tags to a Security Hub CSPM resource (console)**
@@ -37 +37 @@ Console
-When you create an automation rule or a configuration policy, the Security Hub console provides options for adding tags to it. You can provide the tag key and tag value in the **Tags** section.
+When you create an automation rule or a configuration policy, the Security Hub CSPM console provides options for adding tags to it. You can provide the tag key and tag value in the **Tags** section.
@@ -39 +39 @@ When you create an automation rule or a configuration policy, the Security Hub c
-Security Hub API
+Security Hub CSPM API
@@ -42 +42 @@ Security Hub API
-**To add tags to a Security Hub resource (API)**
+**To add tags to a Security Hub CSPM resource (API)**
@@ -50 +50 @@ To create a resource and add one or more tags to it programmatically, use the ap
-  * To enable Security Hub and add one or more tags to your `Hub` resource, invoke the [EnableSecurityHub](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableSecurityHub.html) API or, if you're using the AWS Command Line Interface (AWS CLI), run the [enable-security-hub](https://docs.aws.amazon.com/cli/latest/reference/securityhub/enable-security-hub.html) command.
+  * To enable Security Hub CSPM and add one or more tags to your `Hub` resource, invoke the [EnableSecurityHub](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableSecurityHub.html) API or, if you're using the AWS Command Line Interface (AWS CLI), run the [enable-security-hub](https://docs.aws.amazon.com/cli/latest/reference/securityhub/enable-security-hub.html) command.
@@ -57 +57 @@ In your request, use the `tags` parameter to specify the tag key and optional ta
-To add one or more tags to an existing resource, use the [TagResource](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_TagResource.html) operation of the Security Hub API or, if you're using the AWS CLI, run the [tag-resource](https://docs.aws.amazon.com/cli/latest/reference/securityhub/tag-resource.html) command. In your request, specify the Amazon Resource Name (ARN) of the resource that you want to add a tag to. Use the `tags` parameter to specify the tag key (`key`) and optional tag value (`value`) for each tag to add. The `tags` parameter specifies an array of objects, one object for each tag key and its associated tag value.
+To add one or more tags to an existing resource, use the [TagResource](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_TagResource.html) operation of the Security Hub CSPM API or, if you're using the AWS CLI, run the [tag-resource](https://docs.aws.amazon.com/cli/latest/reference/securityhub/tag-resource.html) command. In your request, specify the Amazon Resource Name (ARN) of the resource that you want to add a tag to. Use the `tags` parameter to specify the tag key (`key`) and optional tag value (`value`) for each tag to add. The `tags` parameter specifies an array of objects, one object for each tag key and its associated tag value.
@@ -93 +93 @@ For each object in a `tags` array, both the `key` and `value` arguments are requ
-If a tagging operation succeeds, Security Hub returns an empty HTTP 200 response. Otherwise, Security Hub returns an HTTP 4 _xx_ or 500 response that indicates why the operation failed.
+If a tagging operation succeeds, Security Hub CSPM returns an empty HTTP 200 response. Otherwise, Security Hub CSPM returns an HTTP 4 _xx_ or 500 response that indicates why the operation failed.