AWS controltower documentation change
Summary
Updated documentation URLs to fix formatting (added double slashes in paths) and maintained references to Security Hub controls documentation. No substantive content changes to security controls themselves.
Security assessment
The changes are purely URL formatting corrections (adding double slashes) and do not alter security guidance, introduce new controls, or address vulnerabilities. The deprecation notice for SH.S3.4 control remains informational without new security implications.
Diff
diff --git a/controltower/latest/controlreference/security-hub-controls.md b/controltower/latest/controlreference/security-hub-controls.md index a4d68b552..157956e78 100644 --- a//controltower/latest/controlreference/security-hub-controls.md +++ b//controltower/latest/controlreference/security-hub-controls.md @@ -11 +11 @@ AWS Control Tower is integrated with AWS Security Hub to provide detective contr -The **Service-Managed Standard: AWS Control Tower** supports a subset of controls in the **AWS Foundational Security Best Practices (FSBP)** standard. To learn more about this standard and to view the available controls, see [Service-Managed Standard: AWS Control Tower](https://docs.aws.amazon.com/securityhub/latest/userguide/service-managed-standard-aws-control-tower.html#aws-control-tower-standard-controls). For more general information about Security Hub standards, see [Security standards and controls in Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards.html), in the _AWS Security Hub User Guide_. +The **Service-Managed Standard: AWS Control Tower** supports a subset of controls in the **AWS Foundational Security Best Practices (FSBP)** standard. To learn more about this standard and to view the available controls, see [Service-Managed Standard: AWS Control Tower](https://docs.aws.amazon.com//securityhub/latest/userguide/service-managed-standard-aws-control-tower.html#aws-control-tower-standard-controls). For more general information about Security Hub standards, see [Security standards and controls in Security Hub](https://docs.aws.amazon.com//securityhub/latest/userguide/securityhub-standards.html), in the _AWS Security Hub User Guide_. @@ -38 +38 @@ You can delete this standard in the AWS Control Tower console by deactivating al -The control named **[SH.S3.4] S3 buckets should have server-side encryption enabled** is deprecated, effective July 18, 2023. It was removed from the controls library on August 18, 2023. For more information, see [AWS Control Tower deprecates two controls](https://docs.aws.amazon.com/controltower/latest/userguide/2023-all.html#deprecate-2controls). +The control named **[SH.S3.4] S3 buckets should have server-side encryption enabled** is deprecated, effective July 18, 2023. It was removed from the controls library on August 18, 2023. For more information, see [AWS Control Tower deprecates two controls](https://docs.aws.amazon.com//controltower/latest/userguide/2023-all.html#deprecate-2controls). @@ -60 +60 @@ When drift is reported, you can remediate the situation by choosing **Re-registe -You can enable and manage some Security Hub controls from AWS Control Tower, with the [Security Hub Service-managed Standard: AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/security-hub-controls.html). +You can enable and manage some Security Hub controls from AWS Control Tower, with the [Security Hub Service-managed Standard: AWS Control Tower](https://docs.aws.amazon.com//controltower/latest/userguide/security-hub-controls.html). @@ -64 +64 @@ You can enable and manage some Security Hub controls from AWS Control Tower, wit -It is important to know that some Security Hub controls do not operate in certain AWS Regions where AWS Control Tower is available, because those Regions do not support the required underlying functionality. As a result, when you deploy an Security Hub control through AWS Control Tower, the control may not be operating in all Regions that you govern with AWS Control Tower. For more information about the Security Hub controls that cannot be deployed in certain Regions, see the [Security Hub controls reference documentation](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-controls-reference.html). +It is important to know that some Security Hub controls do not operate in certain AWS Regions where AWS Control Tower is available, because those Regions do not support the required underlying functionality. As a result, when you deploy an Security Hub control through AWS Control Tower, the control may not be operating in all Regions that you govern with AWS Control Tower. For more information about the Security Hub controls that cannot be deployed in certain Regions, see the [Security Hub controls reference documentation](https://docs.aws.amazon.com//securityhub/latest/userguide/securityhub-controls-reference.html). @@ -66 +66 @@ It is important to know that some Security Hub controls do not operate in certai -You can view the most updated list of the Regions for each control in the AWS Control Tower console, or by calling the [`GetControl`](https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_GetControl.html) API. +You can view the most updated list of the Regions for each control in the AWS Control Tower console, or by calling the [`GetControl`](https://docs.aws.amazon.com//controlcatalog/latest/APIReference/API_GetControl.html) API.