AWS securityhub documentation change
Summary
Updated documentation regarding regional availability of Security Hub CSPM features, cross-Region aggregation restrictions, and supported integrations. Clarified language about disabled Regions and updated list of Regions where AWS Resource Tagging standard is unavailable.
Security assessment
The changes clarify regional restrictions and integration availability for security-related features (CSPM, cross-Region aggregation, security standards) but do not address specific vulnerabilities or security incidents. Updates focus on documentation accuracy rather than resolving security weaknesses.
Diff
diff --git a/securityhub/latest/userguide/securityhub-regions.md b/securityhub/latest/userguide/securityhub-regions.md index 66aa5b261..adba83342 100644 --- a//securityhub/latest/userguide/securityhub-regions.md +++ b//securityhub/latest/userguide/securityhub-regions.md @@ -9 +9 @@ Cross-Region aggregation restrictionsAvailability of integrations by RegionAvail -Some AWS Security Hub Cloud Security Posture Management (CSPM) features are available in only certain AWS Regions. The following sections specify these Regional limits. For a complete list of all the Regions where Security Hub CSPM is currently available, see [AWS Security Hub Cloud Security Posture Management (CSPM) endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/sechub.html) in the _AWS General Reference_. +Some AWS Security Hub Cloud Security Posture Management (CSPM) features are available in only certain AWS Regions. The following sections specify these Regional limits. For a complete list of all the Regions where Security Hub CSPM is currently available, see [AWS Security Hub endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/sechub.html) in the _AWS General Reference_. @@ -13 +13 @@ Some AWS Security Hub Cloud Security Posture Management (CSPM) features are avai -In AWS GovCloud (US) Regions, [cross-Region aggregation](./finding-aggregation.html) is available for findings, finding updates, and insights across AWS GovCloud (US) Regions only. Specifically, you can only aggregate findings, finding updates, and insights between AWS GovCloud (US-East) and AWS GovCloud (US-West). +In AWS GovCloud (US) Regions, [cross-Region aggregation](./finding-aggregation.html) is available for findings, finding updates, and insights across AWS GovCloud (US) Regions only. Specifically, you can aggregate findings, finding updates, and insights only between the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions. @@ -15 +15 @@ In AWS GovCloud (US) Regions, [cross-Region aggregation](./finding-aggregation.h -In the China Regions, cross-Region aggregation is available for findings, finding updates, and insights across the China Regions only. Specifically, you can only aggregate findings, finding updates, and insights between China (Beijing) and China (Ningxia). +In the China Regions, cross-Region aggregation is available for findings, finding updates, and insights across the China Regions only. Specifically, you can aggregate findings, finding updates, and insights only between the China (Beijing) and China (Ningxia) Regions. @@ -17 +17 @@ In the China Regions, cross-Region aggregation is available for findings, findin -You can't use a Region that is disabled by default as your aggregation Region. For a list of Regions that are disabled by default, see [Enable or disable AWS Regions in your account](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html#rande-manage-enable) in the _AWS Account Management Reference Guide_. +You can't use a Region that's disabled by default as your aggregation Region. For a list of Regions that are disabled by default, see [Enable or disable AWS Regions in your account](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html#rande-manage-enable) in the _AWS Account Management Reference Guide_. @@ -21 +21 @@ You can't use a Region that is disabled by default as your aggregation Region. F -Some integrations are not available in all Regions. If an integration is not available in a specific Region, it is not listed on the **Integrations** page of the Security Hub CSPM console when you choose that Region. +Some integrations aren't available in all AWS Regions. On the Security Hub CSPM console, an integration doesn't appear on the **Integrations** page if it isn't available in the Region that you're currently signed in to. @@ -23 +23 @@ Some integrations are not available in all Regions. If an integration is not ava -### Integrations that are supported in the China (Beijing) and China (Ningxia) Regions +### Integrations supported in the China (Beijing) and China (Ningxia) Regions @@ -25 +25 @@ Some integrations are not available in all Regions. If an integration is not ava -The China (Beijing) and China (Ningxia) Regions support only the following [integrations with AWS services](./securityhub-internal-providers.html): +In the China (Beijing) and China (Ningxia) Regions, Security Hub CSPM supports only the following [integrations with AWS services](./securityhub-internal-providers.html): @@ -46 +46 @@ The China (Beijing) and China (Ningxia) Regions support only the following [inte -The China (Beijing) and China (Ningxia) Regions support only the following [third-party integrations](./securityhub-partner-providers.html): +In the China (Beijing) and China (Ningxia) Regions, Security Hub CSPM supports only the following [third-party integrations](./securityhub-partner-providers.html): @@ -75 +75 @@ The China (Beijing) and China (Ningxia) Regions support only the following [thir -### Integrations that are supported in AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions +### Integrations supported in the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions @@ -77 +77 @@ The China (Beijing) and China (Ningxia) Regions support only the following [thir -The AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions support only the following [integrations with AWS services](./securityhub-internal-providers.html): +In the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions, Security Hub CSPM supports only the following [integrations with AWS services](./securityhub-internal-providers.html): @@ -98 +98 @@ The AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions support only the f -The AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions support only the following [third-party integrations](./securityhub-partner-providers.html): +In the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions, Security Hub CSPM supports only the following [third-party integrations](./securityhub-partner-providers.html): @@ -161 +161 @@ The AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions support only the f -The AWS Control Tower service-managed standard is available only in Regions that AWS Control Tower supports, including AWS GovCloud (US) Regions. For a list of Regions that AWS Control Tower currently supports, see [How AWS Regions Work With AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/region-how.html) in the _AWS Control Tower User Guide_. +The [AWS Control Tower service-managed standard](./service-managed-standard-aws-control-tower.html) is available only in AWS Regions that AWS Control Tower supports, including AWS GovCloud (US) Regions. For a list of Regions that AWS Control Tower currently supports, see [How AWS Regions Work With AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/region-how.html) in the _AWS Control Tower User Guide_. @@ -163 +163 @@ The AWS Control Tower service-managed standard is available only in Regions that -The AWS Resource Tagging standard isn't available in the Canada West (Calgary), China, and AWS GovCloud (US) Regions. +The [AWS Resource Tagging standard](./standards-tagging.html) isn't available in the following Regions: Asia Pacific (Taipei), Asia Pacific (Thailand), and Mexico (Central).