AWS securityhub documentation change
Summary
Updated documentation structure, added 'Integrations' section, expanded content about security findings integration with third-party products, and rebranded 'Security Hub CSPM' to 'AWS Security Hub CSPM' consistently
Security assessment
The changes primarily enhance documentation about security posture management features and integration capabilities. The new 'Understanding integrations' section explains how Security Hub CSPM consolidates security findings from multiple sources, which is a security feature but not a response to a specific vulnerability. No evidence of addressing a security incident or vulnerability is present.
Diff
diff --git a/securityhub/latest/userguide/what-is-securityhub.md b/securityhub/latest/userguide/what-is-securityhub.md index c6ae59705..432f1e4dc 100644 --- a//securityhub/latest/userguide/what-is-securityhub.md +++ b//securityhub/latest/userguide/what-is-securityhub.md @@ -3 +3 @@ -[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-is-securityhub-v2.html) +[Documentation](/index.html)[AWS Security Hub](/securityhub/index.html)[ User Guide ](what-are-securityhub-services.html) @@ -5 +5 @@ -Benefits of Security Hub CSPMAccessing Security Hub CSPMRelated servicesSecurity Hub CSPM free trial, usage, and pricing +Benefits of Security Hub CSPMAccessing Security Hub CSPMRelated servicesSecurity Hub CSPM free trial, usage, and pricingIntegrations @@ -7 +7 @@ Benefits of Security Hub CSPMAccessing Security Hub CSPMRelated servicesSecurity -# What is AWS Security Hub CSPM? +# Introduction to AWS Security Hub CSPM @@ -9 +9 @@ Benefits of Security Hub CSPMAccessing Security Hub CSPMRelated servicesSecurity -AWS Security Hub Cloud Security Posture Management (CSPM) provides you with a comprehensive view of your security state in AWS and helps you assess your AWS environment against security industry standards and best practices. +AWS Security Hub Cloud Security Posture Management (AWS Security Hub CSPM) provides you with a comprehensive view of your security state in AWS and helps you assess your AWS environment against security industry standards and best practices. @@ -11 +11 @@ AWS Security Hub Cloud Security Posture Management (CSPM) provides you with a co -Security Hub CSPM collects security data across AWS accounts, AWS services, and supported third-party products and helps you analyze your security trends and identify the highest priority security issues. +AWS Security Hub CSPM collects security data across AWS accounts, AWS services, and supported third-party products and helps you analyze your security trends and identify the highest priority security issues. @@ -28,0 +29,30 @@ Security Hub CSPM offers automation features that help you triage and remediate + * [Concepts and terminology in Security Hub CSPM](./securityhub-concepts.html) + + * [Enabling Security Hub CSPM](./securityhub-settingup.html) + + * [Managing administrator and member accounts in Security Hub CSPM](./securityhub-accounts.html) + + * [Understanding cross-Region aggregation in Security Hub CSPM](./finding-aggregation.html) + + * [Understanding security standards in Security Hub CSPM](./standards-view-manage.html) + + * [Understanding security controls in Security Hub CSPM](./controls-view-manage.html) + + * Understanding integrations in Security Hub CSPM + + * [Creating and updating findings in Security Hub CSPM](./securityhub-findings.html) + + * [Viewing insights in Security Hub CSPM](./securityhub-insights.html) + + * [Automatically modifying and acting on findings in Security Hub CSPM](./automations.html) + + * [ Working with the dashboard in Security Hub CSPM ](./dashboard.html) + + * [Regional limits for Security Hub CSPM](./securityhub-regions.html) + + * [Creating Security Hub CSPM resources with CloudFormation](./creating-resources-with-cloudformation.html) + + * [Subscribing to Security Hub CSPM announcements with Amazon SNS](./securityhub-announcements.html) + + * [Disabling Security Hub CSPM](./securityhub-disable.html) + @@ -58 +88 @@ You can create automation rules that modify or suppress findings based on your d -Security Hub CSPM is available in most AWS Regions. For a list of Regions where Security Hub CSPM is currently available, see [AWS Security Hub Cloud Security Posture Management (CSPM) endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/sechub.html) in the _AWS General Reference_. For information about managing AWS Regions for your AWS account, see [Specifying which AWS Regions your account can use](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html) in the _AWS Account Management Reference Guide_. +Security Hub CSPM is available in most AWS Regions. For a list of Regions where Security Hub CSPM is currently available, see [AWS Security Hub CSPM endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/sechub.html) in the _AWS General Reference_. For information about managing AWS Regions for your AWS account, see [Specifying which AWS Regions your account can use](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html) in the _AWS Account Management Reference Guide_. @@ -70 +100 @@ The AWS Management Console is a browser-based interface that you can use to crea -The Security Hub CSPM API gives you programmatic access to your Security Hub CSPM account, data, and resources. With the API, you can send HTTPS requests directly to Security Hub CSPM. For information about the API, see the _[AWS Security Hub Cloud Security Posture Management (CSPM) API Reference](https://docs.aws.amazon.com/securityhub/1.0/APIReference/)_. +The Security Hub CSPM API gives you programmatic access to your Security Hub CSPM account, data, and resources. With the API, you can send HTTPS requests directly to Security Hub CSPM. For information about the API, see the _[AWS Security Hub CSPM API Reference](https://docs.aws.amazon.com/securityhub/1.0/APIReference/)_. @@ -112 +142 @@ Security Hub CSPM provides usage information, including an estimated 30-day cost - 1. Open the AWS Security Hub Cloud Security Posture Management (CSPM) console at [https://console.aws.amazon.com/securityhub/](https://console.aws.amazon.com/securityhub/). + 1. Open the AWS Security Hub CSPM console at [https://console.aws.amazon.com/securityhub/](https://console.aws.amazon.com/securityhub/). @@ -126,0 +157,33 @@ For more information about how Security Hub CSPM charges for ingested findings a +## Understanding integrations in Security Hub CSPM + +AWS Security Hub CSPM can ingest security findings from several AWS services and supported third-party AWS Partner Network security solutions. These integrations can help you get a comprehensive view of security and compliance across your AWS environment. Security Hub CSPM ingests findings from integrated solutions and converts them to the AWS Security Finding Format (ASFF). + +###### Important + +For supported AWS and third-party product integrations, Security Hub CSPM receives and consolidates findings that are generated only after you enable Security Hub CSPM for your AWS accounts. The service doesn't retroactively receive and consolidate security findings that were generated before you enabled Security Hub CSPM. + +The **Integrations** page of the Security Hub CSPM console provides access to available AWS and third-party product integrations. The Security Hub CSPM API also has operations for managing integrations. + +An integration might not be available in all AWS Regions. If an integration isn't supported in the Region that you are currently signed in to on the Security Hub CSPM console, it doesn't appear on the **Integrations** page of the console. For a list of integrations that are available in the China Regions and AWS GovCloud (US) Regions, see [Availability of integrations by Region](./securityhub-regions.html#securityhub-regions-integration-support). + +In addition to AWS service and built-in third-party integrations, you can integrate custom security products with Security Hub CSPM. You can then send findings from these products to Security Hub CSPM by using the Security Hub CSPM API. You can also use the API to update existing findings that Security Hub CSPM received from a custom security product. + +###### Topics + + * [Reviewing a list of Security Hub CSPM integrations](./securityhub-integrations-view-filter.html) + + * [Enabling the flow of findings from a Security Hub CSPM integration](./securityhub-integration-enable.html) + + * [Disabling the flow of findings from a Security Hub CSPM integration](./securityhub-integration-disable.html) + + * [Viewing findings from a Security Hub CSPM integration](./securityhub-integration-view-findings.html) + + * [AWS service integrations with Security Hub CSPM](./securityhub-internal-providers.html) + + * [Third-party product integrations with Security Hub CSPM](./securityhub-partner-providers.html) + + * [Integrating Security Hub CSPM with custom products](./securityhub-custom-providers.html) + + + + @@ -135 +198 @@ Disabling Security Hub -Security Hub CSPM concepts +Concepts