AWS solutions documentation change
Summary
Updated log group references from SHARR to ASR naming convention
Security assessment
Consistency update for log group names without security content changes
Diff
diff --git a/solutions/latest/automated-security-response-on-aws/solution-logs.md b/solutions/latest/automated-security-response-on-aws/solution-logs.md index a97494520..dd84696de 100644 --- a//solutions/latest/automated-security-response-on-aws/solution-logs.md +++ b//solutions/latest/automated-security-response-on-aws/solution-logs.md @@ -9 +9 @@ This section includes Troubleshooting information for this solution, see left na -This solution collects output from remediation runbooks, which run under AWS Systems Manager, and logs the result to CloudWatch Logs group `SO0111-SHARR` in the AWS Security Hub admin account. There is one stream per control per day. +This solution collects output from remediation runbooks, which run under AWS Systems Manager, and logs the result to CloudWatch Logs group `SO0111-ASR` in the AWS Security Hub admin account. There is one stream per control per day. @@ -11 +11 @@ This solution collects output from remediation runbooks, which run under AWS Sys -The Orchestrator Step Functions logs all step transitions to the `SO0111-SHARR-Orchestrator` CloudWatch Logs Group in the AWS Security Hub admin account. This log is an audit trail to record state transitions for each instance of the Step Functions. There is one log stream per Step Functions execution. +The Orchestrator Step Functions logs all step transitions to the `SO0111-ASR-Orchestrator` CloudWatch Logs Group in the AWS Security Hub admin account. This log is an audit trail to record state transitions for each instance of the Step Functions. There is one log stream per Step Functions execution. @@ -15 +15 @@ Both log groups are encrypted using an AWS KMS Customer-Manager Key (CMK). -The following troubleshooting information uses the `SO0111-SHARR` log group. Use this log, as well as AWS Systems Manager Automation console, Automation Executions logs, Step Function console, and Lambda logs to troubleshoot problems. +The following troubleshooting information uses the `SO0111-ASR` log group. Use this log, as well as AWS Systems Manager Automation console, Automation Executions logs, Step Function console, and Lambda logs to troubleshoot problems. @@ -17 +17 @@ The following troubleshooting information uses the `SO0111-SHARR` log group. Use -If a remediation fails, a message similar to the following will be logged to `SO0111-SHARR` in the log stream for the standard, control, and date. For example: **CIS-2.9-2021-08-12** +If a remediation fails, a message similar to the following will be logged to `SO0111-ASR` in the log stream for the standard, control, and date. For example: **CIS-2.9-2021-08-12** @@ -22 +22 @@ If a remediation fails, a message similar to the following will be logged to `SO -The following messages provide additional detail. This output is from the SHARR runbook for the security standard and control. For example: **SHARR-CIS_1.2.0_2.9** +The following messages provide additional detail. This output is from the ASR runbook for the security standard and control. For example: **ASR-CIS_1.2.0_2.9**