AWS solutions documentation change
Summary
Updated template names, added CIS300Stack documentation, restructured member roles section
Security assessment
Documentation updates for CIS benchmarks and remediation roles improve security feature visibility but lack evidence of addressing active vulnerabilities. Changes appear to be organizational/naming updates.
Diff
diff --git a/solutions/latest/automated-security-response-on-aws/aws-cloudformation-template.md b/solutions/latest/automated-security-response-on-aws/aws-cloudformation-template.md index de58f86a8..af6d1b608 100644 --- a//solutions/latest/automated-security-response-on-aws/aws-cloudformation-template.md +++ b//solutions/latest/automated-security-response-on-aws/aws-cloudformation-template.md @@ -5 +5 @@ -Admin account supportMember accountsMember rolesTicket system integration +Admin account supportMember rolesMember accountsTicket system integration @@ -9 +9 @@ Admin account supportMember accountsMember rolesTicket system integration -[  ](https://solutions-reference.s3.amazonaws.com/automated-security-response-on-aws/latest/aws-sharr-deploy.template) **aws-sharr-deploy.template** \- Use this template to launch the Automated Security Response on AWS solution. The template installs the core components of the solution, a nested stack for the AWS Step Functions logs, and one nested stack for each security standard you choose to activate. +[  ](https://solutions-reference.s3.amazonaws.com/automated-security-response-on-aws/latest/automated-security-response-admin.template) **automated-security-response-admin.template** \- Use this template to launch the Automated Security Response on AWS solution. The template installs the core components of the solution, a nested stack for the AWS Step Functions logs, and one nested stack for each security standard you choose to activate. @@ -15 +15 @@ Services used include Amazon Simple Notification Service, AWS Key Management Ser -The following templates are installed in the AWS Security Hub admin account to turn on the security standards that you want to support. You can choose which of the following templates to install when installing the `aws-sharr-deploy.template`. +The following templates are installed in the AWS Security Hub admin account to turn on the security standards that you want to support. You can choose which of the following templates to install when installing the `automated-security-response-admin.template`. @@ -17 +17 @@ The following templates are installed in the AWS Security Hub admin account to t -**aws-sharr-orchestrator-log.template** \- Creates a CloudWatch logs group for the Orchestrator Step Function. +**automated-security-response-orchestrator-log.template** \- Creates a CloudWatch logs group for the Orchestrator Step Function. @@ -24,0 +25,2 @@ The following templates are installed in the AWS Security Hub admin account to t +**CIS300Stack.template** \- CIS Amazon Web Services Foundations benchmarks, v3.0.0 rules. + @@ -29 +31,5 @@ The following templates are installed in the AWS Security Hub admin account to t -**SCStack.template** \- SC v2.0.0 rules. +**SCStack.template** \- Security Controls v2.0.0 rules. + +## Member roles + +[  ](https://solutions-reference.s3.amazonaws.com/automated-security-response-on-aws/latest/automated-security-response-member-roles.template) **automated-security-response-member-roles.template** \- Defines the remediation roles needed in each AWS Security Hub member account. @@ -33 +39 @@ The following templates are installed in the AWS Security Hub admin account to t -[  ](https://solutions-reference.s3.amazonaws.com/automated-security-response-on-aws/latest/aws-sharr-member.template) **aws-sharr-member.template** \- Use this template after you set up the core solution to install AWS Systems Manager automation runbooks and permissions in each of your AWS Security Hub member accounts (including the admin account). This template allows you to choose which security standard playbooks to install. +[  ](https://solutions-reference.s3.amazonaws.com/automated-security-response-on-aws/latest/automated-security-response-member.template) **automated-security-response-member.template** \- Use this template after you set up the core solution to install AWS Systems Manager automation runbooks and permissions in each of your AWS Security Hub member accounts (including the admin account). This template allows you to choose which security standard playbooks to install. @@ -35 +41 @@ The following templates are installed in the AWS Security Hub admin account to t -The `aws-sharr-member.template` installs the following templates based on your selections: +The `automated-security-response-member.template` installs the following templates based on your selections: @@ -37 +43 @@ The `aws-sharr-member.template` installs the following templates based on your s -**aws-sharr-remediations.template** \- Common remediation code used by one or more of the security standards. +**automated-security-response-remediation-runbooks.template** \- Common remediation code used by one or more of the security standards. @@ -44,0 +51,2 @@ The `aws-sharr-member.template` installs the following templates based on your s +**CIS300MemberStack.template** \- CIS Amazon Web Services Foundations benchmarks, version 3.0.0 settings, permissions, and remediation runbooks. + @@ -51,3 +59 @@ The `aws-sharr-member.template` installs the following templates based on your s -## Member roles - -[  ](https://solutions-reference.s3.amazonaws.com/automated-security-response-on-aws/latest/aws-sharr-member-roles.template) **aws-sharr-member-roles.template** \- Defines the remediation roles needed in each AWS Security Hub member account. +**automated-security-response-member-cloudtrail.template** \- Used in the Action Log feature to track and audit and service activity.