AWS inspector documentation change
Summary
Updated documentation about Security Hub integration, including clarification that Amazon Inspector Code Security findings are not available in this integration
Security assessment
The changes clarify integration details with Security Hub and explicitly note limitations regarding Code Security findings. While security-related documentation is updated, there is no evidence of addressing a specific vulnerability or security incident.
Diff
diff --git a/inspector/latest/user/securityhub-integration.md b/inspector/latest/user/securityhub-integration.md index 306511319..08d24e7ed 100644 --- a//inspector/latest/user/securityhub-integration.md +++ b//inspector/latest/user/securityhub-integration.md @@ -9 +9 @@ Viewing Amazon Inspector findings in AWS Security HubActivating and configuring -AWS Security Hub provides a comprehensive view of your security state in AWS and helps you check your environment against security industry standards and best practices. Security Hub collects security data from AWS accounts, services, and supported products. You can use the information Security Hub provides to analyze your security trends and identify the highest priority security issues. When you activate the integration, you can send findings from Amazon Inspector to Security Hub, and Security Hub can include these findings in its analysis of your security posture. +Security Hub provides a comprehensive view of your security state in AWS. This helps you check your environment against security industry standards and best practices. Security Hub collects security data from AWS accounts, services, and supported products. You can use this information to analyze security trends and identify security issues. When you activate the Amazon Inspector integration with Security Hub, Amazon Inspector can send findings to Security Hub, and Security Hub can analyze those findings as part of your security posture. @@ -11 +11 @@ AWS Security Hub provides a comprehensive view of your security state in AWS and -Security Hub tracks security issues as findings. Some of these findings can result from issues that other AWS services or third-party products detect. Security Hub uses a set of rules to detect security issues and generate findings. Security Hub provides tools that help you manage findings. Security Hub archives Amazon Inspector findings once the findings have been closed in Amazon Inspector. You can also [view a history of your findings and finding details](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-viewing.html), as well as [track the status of an investigation into a finding](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-taking-action.html). +Security Hub tracks security issues as findings. Some findings can be a result of security issues detected in other AWS services or third-party products. Security Hub uses a set of rules to detect security issues and generate findings and provides tools, so you can manage findings. Security Hub archives Amazon Inspector findings once the findings have been closed in Amazon Inspector. You can also [view a history of your findings and finding details](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-viewing.html), as well as [track the status of an investigation into a finding](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-taking-action.html). @@ -13 +13,5 @@ Security Hub tracks security issues as findings. Some of these findings can resu -Security Hub findings use a standard JSON format called the [AWS Security Finding Format (ASFF)](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html). The ASFF includes details about the source of the issue, the affected resources, and the current status of your findings. +Security Hub processes findings in the [AWS Security Finding Format (ASFF)](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html). This format includes details such as unique identifiers, severity levels, affected resources, remediation guidance, workflow status, and contextual information. + +###### Note + +Security findings generated by [Amazon Inspector Code Security](https://docs.aws.amazon.com/inspector/latest/user/code-security-assessments.html) are not available for this integration. However, you can access these particular findings in the Amazon Inspector console and through the [Amazon Inspector API](https://docs.aws.amazon.com/inspector/v2/APIReference/Welcome.html).