AWS securityhub documentation change
Summary
Updated documentation to specifically reference Security Hub CSPM (Cloud Security Posture Management) resources instead of generic Security Hub resources. Changed API/console references to 'Security Hub CSPM API' and updated links.
Security assessment
The changes primarily rebrand references to Security Hub CSPM resources but do not address any specific security vulnerabilities or weaknesses. The tag removal process itself relates to resource management rather than security fixes. While tags can be used for access control, the documentation update itself doesn't introduce new security controls or address exploits.
Diff
diff --git a/securityhub/latest/userguide/tags-remove.md b/securityhub/latest/userguide/tags-remove.md index 7594781e2..5e0a25b5e 100644 --- a//securityhub/latest/userguide/tags-remove.md +++ b//securityhub/latest/userguide/tags-remove.md @@ -3 +3 @@ -[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[User Guide](what-is-securityhub.html) +[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-security-hub-adv.html) @@ -5 +5 @@ -# Removing tags from Security Hub resources +# Removing tags from Security Hub CSPM resources @@ -7 +7 @@ -If you add tags to an AWS Security Hub resource, you can subsequently remove one or more of them. A _tag_ is a label that you define and assign to AWS resources, including certain types of Security Hub resources. You can add, edit, and remove tags from the following types of Security Hub resources: automation rules, configuration policies, and the `Hub` resource. +If you add tags to an AWS Security Hub Cloud Security Posture Management (CSPM) resource, you can subsequently remove one or more of them. A _tag_ is a label that you define and assign to AWS resources, including certain types of Security Hub CSPM resources. You can add, edit, and remove tags from the following types of Security Hub CSPM resources: automation rules, configuration policies, and the `Hub` resource. @@ -9 +9 @@ If you add tags to an AWS Security Hub resource, you can subsequently remove one -To remove tags from an individual AWS Security Hub resource, you can use the Security Hub API. The Security Hub console currently doesn't support tag removal. +To remove tags from an individual AWS Security Hub Cloud Security Posture Management (CSPM) resource, you can use the Security Hub CSPM API. The Security Hub CSPM console currently doesn't support tag removal. @@ -11 +11 @@ To remove tags from an individual AWS Security Hub resource, you can use the Sec -To remove tags from multiple Security Hub resources at the same time, use the tagging operations of the [AWS Resource Groups Tagging API](https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/overview.html). +To remove tags from multiple Security Hub CSPM resources at the same time, use the tagging operations of the [AWS Resource Groups Tagging API](https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/overview.html). @@ -17 +17 @@ Removing tags from a resource can affect access to the resource. Before you remo -Security Hub API +Security Hub CSPM API @@ -20 +20 @@ Security Hub API -**To remove tags from a Security Hub resource (API)** +**To remove tags from a Security Hub CSPM resource (API)** @@ -22 +22 @@ Security Hub API -To remove one or more tags from a resource programmatically, use the [UntagResource](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UntagResource.html) operation of the Security Hub API. In your request, use the `resourceArn` parameter to specify the Amazon Resource Name (ARN) of the resource to remove a tag from. Use the `tagKeys` parameter to specify the tag key of the tag to remove. To remove multiple tags, append the `tagKeys` parameter and argument for each tag to remove, separated by an ampersand (&)—for example, `tagKeys=`key1`&tagKeys=`key2``. To remove only a specific tag value (not a tag key) from a resource, [edit the tag](./tags-update.html) instead of removing the tag. +To remove one or more tags from a resource programmatically, use the [UntagResource](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UntagResource.html) operation of the Security Hub CSPM API. In your request, use the `resourceArn` parameter to specify the Amazon Resource Name (ARN) of the resource to remove a tag from. Use the `tagKeys` parameter to specify the tag key of the tag to remove. To remove multiple tags, append the `tagKeys` parameter and argument for each tag to remove, separated by an ampersand (&)—for example, `tagKeys=`key1`&tagKeys=`key2``. To remove only a specific tag value (not a tag key) from a resource, [edit the tag](./tags-update.html) instead of removing the tag. @@ -40 +40 @@ To remove multiple tags from a resource, add each additional tag key as an argum -If the operation succeeds, Security Hub returns an empty HTTP 200 response. Otherwise, Security Hub returns an HTTP 4 _xx_ or 500 response that indicates why the operation failed. +If the operation succeeds, Security Hub CSPM returns an empty HTTP 200 response. Otherwise, Security Hub CSPM returns an HTTP 4 _xx_ or 500 response that indicates why the operation failed.