AWS securityhub medium security documentation change
Summary
Updated document scope to include Security Hub CSPM and added entry about reduced finding retention period (90→30 days) with S3 export guidance
Security assessment
The reduced 30-day finding retention period change impacts security monitoring capabilities. The documentation update provides mitigation guidance (S3 exports) which constitutes security feature documentation. This change directly affects security posture by reducing default forensic data availability.
Diff
diff --git a/securityhub/latest/userguide/doc-history.md b/securityhub/latest/userguide/doc-history.md index 7a397f5a8..2d8bc8de2 100644 --- a//securityhub/latest/userguide/doc-history.md +++ b//securityhub/latest/userguide/doc-history.md @@ -5 +5 @@ -# Document history for the AWS Security Hub Cloud Security Posture Management (CSPM) User Guide +# Document history for the AWS Security Hub User Guide @@ -7 +7 @@ -The following table describes the important changes to the documentation since the last release of AWS Security Hub Cloud Security Posture Management (CSPM). For releases of new security controls, the date specifies when the controls begin to be available in supported AWS Regions. It can take 1‐2 weeks for controls to be available in all supported Regions. +The following table describes the important changes to the documentation since the last release of AWS Security Hub and Security Hub CSPM. For releases of new CSPM security controls, the date specifies when the controls begin to be available in supported AWS Regions. It can take 1‐2 weeks for controls to be available in all supported Regions. @@ -9 +9 @@ The following table describes the important changes to the documentation since t -For notification about updates to the _AWS Security Hub Cloud Security Posture Management (CSPM) User Guide_ , you can subscribe to an RSS feed. +For notification about updates to the _AWS Security Hub User Guide_ , you can subscribe to an RSS feed. @@ -12,0 +13 @@ Change| Description| Date +Updates to finding retention| Security Hub CSPM now [stores archived findings](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings.html) for 30 days instead of 90 days, which can reduce finding noise. For longer-term retention, you can export findings to an S3 bucket by [using a custom action with an Amazon EventBridge rule](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-cloudwatch-events.html). | June 20, 2025