AWS securityhub documentation change
Summary
Updated documentation to specifically reference Security Hub Cloud Security Posture Management (CSPM) resources throughout the content, including console/API references and resource types.
Security assessment
The changes focus on rebranding general Security Hub references to CSPM-specific terminology without introducing new security controls, addressing vulnerabilities, or documenting security features. This appears to be a documentation clarification rather than a security-related update.
Diff
diff --git a/securityhub/latest/userguide/tags-retrieve.md b/securityhub/latest/userguide/tags-retrieve.md index f3edcc2ed..19e61b307 100644 --- a//securityhub/latest/userguide/tags-retrieve.md +++ b//securityhub/latest/userguide/tags-retrieve.md @@ -3 +3 @@ -[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[User Guide](what-is-securityhub.html) +[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-security-hub-adv.html) @@ -5 +5 @@ -# Reviewing tags for Security Hub resources +# Reviewing tags for Security Hub CSPM resources @@ -7 +7 @@ -After you add or edit tags for AWS Security Hub resources, you can view what tag keys and tag values a resource currently has. A _tag_ is a label that you define and assign to one or more AWS resources, including certain types of Macie resources. Each tag consists of a required _tag key_ and an optional _tag value_. A _tag key_ is a general label that acts as a category for a more specific tag value. A _tag value_ acts as a descriptor for a tag key. +After you add or edit tags for AWS Security Hub Cloud Security Posture Management (CSPM) resources, you can view what tag keys and tag values a resource currently has. A _tag_ is a label that you define and assign to one or more AWS resources, including certain types of Macie resources. Each tag consists of a required _tag key_ and an optional _tag value_. A _tag key_ is a general label that acts as a category for a more specific tag value. A _tag value_ acts as a descriptor for a tag key. @@ -11 +11 @@ Tags can help you identify, categorize, and manage resources in different ways, -You can add tags to the following types of Security Hub resources: +You can add tags to the following types of Security Hub CSPM resources: @@ -22 +22 @@ You can add tags to the following types of Security Hub resources: -You can review the tags for a Security Hub automation rule or configuration policy by using the Security Hub console or the Security Hub API. The console doesn't support reviewing tags for the `Hub` resource. Programmatically, you can review tags for any resource. +You can review the tags for a Security Hub CSPM automation rule or configuration policy by using the Security Hub CSPM console or the Security Hub CSPM API. The console doesn't support reviewing tags for the `Hub` resource. Programmatically, you can review tags for any resource. @@ -24 +24 @@ You can review the tags for a Security Hub automation rule or configuration poli -To review tags for multiple Security Hub resources at the same time, use the tagging operations of the [AWS Resource Groups Tagging API](https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/overview.html). +To review tags for multiple Security Hub CSPM resources at the same time, use the tagging operations of the [AWS Resource Groups Tagging API](https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/overview.html). @@ -29 +29 @@ Console -###### To review tags for a Security Hub resource (console) +###### To review tags for a Security Hub CSPM resource (console) @@ -31 +31 @@ Console - 1. Using the credentials of the Security Hub administrator, open the AWS Security Hub console at [https://console.aws.amazon.com/securityhub/](https://console.aws.amazon.com/securityhub/). + 1. Using the credentials of the Security Hub CSPM administrator, open the AWS Security Hub Cloud Security Posture Management (CSPM) console at [https://console.aws.amazon.com/securityhub/](https://console.aws.amazon.com/securityhub/). @@ -44 +44 @@ The **Tags** section lists all the tags that are currently assigned to the resou -Security Hub API +Security Hub CSPM API @@ -47 +47 @@ Security Hub API -**To review tags for a Security Hub resource (API)** +**To review tags for a Security Hub CSPM resource (API)** @@ -56 +56 @@ If you're using the AWS CLI, run the [list-tags-for-resource](https://docs.aws.a -If the operation succeeds, Security Hub returns a `tags` array. Each object in the array specifies a tag (both the tag key and tag value) that's currently assigned to the resource. For example: +If the operation succeeds, Security Hub CSPM returns a `tags` array. Each object in the array specifies a tag (both the tag key and tag value) that's currently assigned to the resource. For example: @@ -78 +78 @@ Where `Environment`, `CostCenter`, and `Owner` are the tag keys that are assigne -To retrieve a list of all the Security Hub resources that have tags and all the tags that are assigned to each of those resources, use the [GetResources](https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/API_GetResources.html) operation of the AWS Resource Groups Tagging API. In your request, set the value for the `ResourceTypeFilters` parameter to `securityhub`. To do this using the AWS CLI, run the [get-resources](https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html) command and set the value for the `resource-type-filters` parameter to `securityhub`. For example: +To retrieve a list of all the Security Hub CSPM resources that have tags and all the tags that are assigned to each of those resources, use the [GetResources](https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/API_GetResources.html) operation of the AWS Resource Groups Tagging API. In your request, set the value for the `ResourceTypeFilters` parameter to `securityhub`. To do this using the AWS CLI, run the [get-resources](https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html) command and set the value for the `resource-type-filters` parameter to `securityhub`. For example: @@ -83 +83 @@ To retrieve a list of all the Security Hub resources that have tags and all the -If the operation succeeds, Resource Groups returns a `ResourceTagMappingList` array. The array contains one object for each Security Hub resource that has tags. Each object specifies the ARN of a Security Hub resource, and the tag keys and values that are assigned to the resource. +If the operation succeeds, Resource Groups returns a `ResourceTagMappingList` array. The array contains one object for each Security Hub CSPM resource that has tags. Each object specifies the ARN of a Security Hub CSPM resource, and the tag keys and values that are assigned to the resource.