AWS securityhub documentation change
Summary
Clarified policy application scope by adding 'in your organization' and fixed grammatical error in account selection options
Security assessment
Changes are minor clarifications and grammatical fixes without introducing new security concepts or addressing vulnerabilities.
Diff
diff --git a/securityhub/latest/userguide/securityhub-v2-da-policy.md b/securityhub/latest/userguide/securityhub-v2-da-policy.md index e53e13845..15688dc95 100644 --- a//securityhub/latest/userguide/securityhub-v2-da-policy.md +++ b//securityhub/latest/userguide/securityhub-v2-da-policy.md @@ -7 +7 @@ -The delegated administrator for an organization can create a policy allowing it to enable and disable member accounts. All configured policies can be accessed on the **Configurations** screen in the Security Hub console. The following procedure describes how to create the policy. +The delegated administrator for an organization can create a policy allowing it to enable and disable member accounts in your organization. All configured policies can be accessed on the **Configurations** screen in the Security Hub console. The following procedure describes how to create the policy. @@ -23 +23 @@ The delegated administrator for an organization can create a policy allowing it - 7. For **Account selection** , select one of the following options. Choose **All organizational units and accounts** if you want to apply the policy to all organizational units and accounts. Choose **Specific organizational units and accounts** if you want to apply the policy to specific organizational units and accounts. If you choose this option, use the search bar or organizational structure tree to specify the organizational units and accounts where the policy will be applied. Choose **No organizational units or accounts** if you do not want to apply the policy any organizational unit or account. + 7. For **Account selection** , select one of the following options. Choose **All organizational units and accounts** if you want to apply the policy to all organizational units and accounts. Choose **Specific organizational units and accounts** if you want to apply the policy to specific organizational units and accounts. If you choose this option, use the search bar or organizational structure tree to specify the organizational units and accounts where the policy will be applied. Choose **No organizational units or accounts** if you do not want to apply the policy to any organizational unit or account.