AWS securityhub documentation change
Summary
Updated documentation links and terminology from 'Cloud Security Posture Management (CSPM)' to 'CSPM'
Security assessment
Changes involve terminology simplification and link updates without altering security controls or addressing vulnerabilities. The content remains focused on existing NIST compliance documentation.
Diff
diff --git a/securityhub/latest/userguide/standards-reference-nist-800-171.md b/securityhub/latest/userguide/standards-reference-nist-800-171.md index 9527199e4..801d0953f 100644 --- a//securityhub/latest/userguide/standards-reference-nist-800-171.md +++ b//securityhub/latest/userguide/standards-reference-nist-800-171.md @@ -3 +3 @@ -[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-securityhub-v2.html) +[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-are-securityhub-services.html) @@ -24 +24 @@ The requirements apply to all components of non-federal systems and organization -AWS Security Hub Cloud Security Posture Management (CSPM) provides security controls that support a subset of NIST SP 800-171 Revision 2 requirements. The controls perform automated security checks for certain AWS services and resources. To enable and manage these controls, you can enable the NIST SP 800-171 Revision 2 framework as a standard in Security Hub CSPM. Note that the controls don't support NIST SP 800-171 Revision 2 requirements that require manual checks. +AWS Security Hub CSPM provides security controls that support a subset of NIST SP 800-171 Revision 2 requirements. The controls perform automated security checks for certain AWS services and resources. To enable and manage these controls, you can enable the NIST SP 800-171 Revision 2 framework as a standard in Security Hub CSPM. Note that the controls don't support NIST SP 800-171 Revision 2 requirements that require manual checks. @@ -37 +37 @@ AWS Security Hub Cloud Security Posture Management (CSPM) provides security cont -To optimize coverage and the accuracy of findings, it's important to enable and configure resource recording in AWS Config before you enable the NIST SP 800-171 Revision 2 standard in AWS Security Hub Cloud Security Posture Management (CSPM). When you configure resource recording, also be sure to enable it for all the types of AWS resources that are checked by controls that apply to the standard. Otherwise, Security Hub CSPM might not be able to evaluate the appropriate resources, and generate accurate findings for controls that apply to the standard. +To optimize coverage and the accuracy of findings, it's important to enable and configure resource recording in AWS Config before you enable the NIST SP 800-171 Revision 2 standard in AWS Security Hub CSPM. When you configure resource recording, also be sure to enable it for all the types of AWS resources that are checked by controls that apply to the standard. Otherwise, Security Hub CSPM might not be able to evaluate the appropriate resources, and generate accurate findings for controls that apply to the standard. @@ -61 +61 @@ AWS WAF | `AWS::WAFv2::RuleGroup` -The following list specifies the controls that support NIST SP 800-171 Revision 2 requirements and apply to the NIST SP 800-171 Revision 2 standard in AWS Security Hub Cloud Security Posture Management (CSPM). For details about specific requirements that a control supports, choose the control. Then refer to the **Related requirements** field in the details for the control. This field specifies each NIST requirement that the control supports. If the field doesn't specify a particular NIST requirement, the control doesn't support the requirement. +The following list specifies the controls that support NIST SP 800-171 Revision 2 requirements and apply to the NIST SP 800-171 Revision 2 standard in AWS Security Hub CSPM. For details about specific requirements that a control supports, choose the control. Then refer to the **Related requirements** field in the details for the control. This field specifies each NIST requirement that the control supports. If the field doesn't specify a particular NIST requirement, the control doesn't support the requirement.