AWS Security ChangesHomeSearch

AWS securityhub documentation change

Service: securityhub · 2025-06-19 · Documentation low

File: securityhub/latest/userguide/tags-update.md

Summary

Updated documentation to specifically reference Security Hub CSPM (Cloud Security Posture Management) resources instead of general Security Hub resources. Changed API/console references to CSPM versions and updated navigation links.

Security assessment

The changes focus on rebranding documentation around CSPM-specific resources, which is a security feature category. While CSPM relates to security posture management, there's no evidence this addresses a specific vulnerability or security incident - it appears to be documentation refinement rather than patching a security issue.

Diff

diff --git a/securityhub/latest/userguide/tags-update.md b/securityhub/latest/userguide/tags-update.md
index e0bd9dc06..a272b7c72 100644
--- a//securityhub/latest/userguide/tags-update.md
+++ b//securityhub/latest/userguide/tags-update.md
@@ -3 +3 @@
-[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[User Guide](what-is-securityhub.html)
+[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-security-hub-adv.html)
@@ -5 +5 @@
-# Editing tags for Security Hub resources
+# Editing tags for Security Hub CSPM resources
@@ -7 +7 @@
-As your environment or requirements change over time, you can evaluate existing tags for your AWS Security Hub resources and change the tags as necessary. A _tag_ is a label that you define and assign to one or more AWS resources, including certain types of Macie resources. Each tag consists of a required _tag key_ and an optional _tag value_. A _tag key_ is a general label that acts as a category for a more specific tag value. A _tag value_ acts as a descriptor for a tag key.
+As your environment or requirements change over time, you can evaluate existing tags for your AWS Security Hub Cloud Security Posture Management (CSPM) resources and change the tags as necessary. A _tag_ is a label that you define and assign to one or more AWS resources, including certain types of Macie resources. Each tag consists of a required _tag key_ and an optional _tag value_. A _tag key_ is a general label that acts as a category for a more specific tag value. A _tag value_ acts as a descriptor for a tag key.
@@ -11 +11 @@ Tags can help you identify, categorize, and manage resources in different ways,
-You can add tags to the following types of Security Hub resources:
+You can add tags to the following types of Security Hub CSPM resources:
@@ -22 +22 @@ You can add tags to the following types of Security Hub resources:
-To edit tag keys or tag values for a Security Hub resource, you can use the Security Hub API. The Security Hub console currently doesn't support tag editing.
+To edit tag keys or tag values for a Security Hub CSPM resource, you can use the Security Hub CSPM API. The Security Hub CSPM console currently doesn't support tag editing.
@@ -28 +28 @@ Editing tags for a resource can affect access to the resource. Before you edit a
-Security Hub API
+Security Hub CSPM API
@@ -31 +31 @@ Security Hub API
-**To edit tags for a Security Hub resource (API)**
+**To edit tags for a Security Hub CSPM resource (API)**
@@ -35 +35 @@ When you edit a tag for a resource programmatically, you overwrite the existing
-To edit or remove only the tag value that's associated with a tag key, overwrite the existing value by using the [TagResource](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_TagResource.html) operation of the Security Hub API. If you're using the AWS CLI, run the [tag-resource](https://docs.aws.amazon.com/cli/latest/reference/securityhub/tag-resource.html) command. In your request, specify the Amazon Resource Name (ARN) of the resource whose tag value you want to edit or remove.
+To edit or remove only the tag value that's associated with a tag key, overwrite the existing value by using the [TagResource](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_TagResource.html) operation of the Security Hub CSPM API. If you're using the AWS CLI, run the [tag-resource](https://docs.aws.amazon.com/cli/latest/reference/securityhub/tag-resource.html) command. In your request, specify the Amazon Resource Name (ARN) of the resource whose tag value you want to edit or remove.
@@ -62 +62 @@ To remove a tag value from a tag key, don’t specify a value for the `value` ar
-If the operation succeeds, Security Hub returns an empty HTTP 200 response. Otherwise, Security Hub returns an HTTP 4 _xx_ or 500 response that indicates why the operation failed.
+If the operation succeeds, Security Hub CSPM returns an empty HTTP 200 response. Otherwise, Security Hub CSPM returns an HTTP 4 _xx_ or 500 response that indicates why the operation failed.