AWS securityhub documentation change
Summary
Clarified language around disabling controls in specific standards and updated console instructions
Security assessment
Changes are editorial improvements explaining existing control disablement functionality without introducing new security features or addressing vulnerabilities. No evidence of security incident remediation.
Diff
diff --git a/securityhub/latest/userguide/disable-controls-standard.md b/securityhub/latest/userguide/disable-controls-standard.md index c1e9b8c1e..d3343c100 100644 --- a//securityhub/latest/userguide/disable-controls-standard.md +++ b//securityhub/latest/userguide/disable-controls-standard.md @@ -7 +7 @@ -You can disable a control in one or more specific AWS Security Hub Cloud Security Posture Management (CSPM) standards. If the control applies to other enabled standards, Security Hub CSPM still runs security checks for the control and generates control findings. +You can disable a control in only specific security standards, instead of across all standards. If the control applies to other enabled standards, AWS Security Hub Cloud Security Posture Management (CSPM) continues to run security checks for the control and you continue to receive findings for the control. @@ -9 +9 @@ You can disable a control in one or more specific AWS Security Hub Cloud Securit -We recommend aligning the enablement status of a control across all of the enabled standards that the control applies to. For instructions on disabling a control across all of the standards that it applies to, see [Disabling a control across standards](./disable-controls-across-standards.html). +We recommend aligning the enablement status of a control across all of the enabled standards that the control applies to. For information about disabling a control across all of the standards that it applies to, see [Disabling a control across standards](./disable-controls-across-standards.html). @@ -11 +11 @@ We recommend aligning the enablement status of a control across all of the enabl -On the standards details page, you can also disable controls in specific standards. You must disable controls in specific standards separately in each AWS account and AWS Region. When you disable a control in specific standards, it only impacts the current account and Region. +On the standards details page, you can also disable controls in specific standards. You must disable controls in specific standards separately in each AWS account and AWS Region. When you disable a control in specific standards, it affects only the current account and Region. @@ -13 +13 @@ On the standards details page, you can also disable controls in specific standar -Choose your preferred method, and follow the steps on this page to disable a control in one or more specific standards. +Choose your preferred method, and follow these steps to disable a control in one or more specific standards. @@ -26 +26 @@ Security Hub CSPM console - 4. Choose **Disable Control** (this option doesn't appear for a control that's already disabled). + 4. Choose **Disable Control**. This option doesn't appear for a control that's already disabled.