AWS organizations documentation change

Service: organizations · 2025-08-16 · Documentation low

File: organizations/latest/userguide/orgs_manage_policies_security_hub_syntax.md

Summary

Updated Security Hub policy syntax for region enablement/disablement

Security assessment

Changed policy syntax to use @@append operators for region management. No explicit evidence this corrects a security misconfiguration or addresses a vulnerability.

Diff

diff --git a/organizations/latest/userguide/orgs_manage_policies_security_hub_syntax.md b/organizations/latest/userguide/orgs_manage_policies_security_hub_syntax.md
index c27e8d7b7..0d4bf1107 100644
--- a//organizations/latest/userguide/orgs_manage_policies_security_hub_syntax.md
+++ b//organizations/latest/userguide/orgs_manage_policies_security_hub_syntax.md
@@ -35,7 +35,8 @@ A Security Hub policy uses this basic structure:
-          "enable_in_regions":[
-             "us-east-1",
-             "us-west-2"
-          ],
-          "disable_in_regions":[
-             "eu-central-1"
-          ]
+        "enable_in_regions": {
+          "@@append": ["ALL_SUPPORTED"],
+          "@@operators_allowed_for_child_policies": ["@@all"]
+        },
+        "disable_in_regions": {
+          "@@append": [],
+          "@@operators_allowed_for_child_policies": ["@@all"]
+        }