AWS securityhub documentation change
Summary
Added warning about potential duplicate findings from overlapping CSPM and Security Hub EventBridge rules
Security assessment
The change provides operational guidance to prevent duplicate event processing but doesn't address a security vulnerability. It helps maintain effective monitoring hygiene rather than fixing a security flaw.
Diff
diff --git a/securityhub/latest/userguide/securityhub-v2-eventbridge-automations.md b/securityhub/latest/userguide/securityhub-v2-eventbridge-automations.md index 99bcbe6a6..f1d674e50 100644 --- a//securityhub/latest/userguide/securityhub-v2-eventbridge-automations.md +++ b//securityhub/latest/userguide/securityhub-v2-eventbridge-automations.md @@ -35,0 +36,4 @@ Security Hub sends new findings and updated findings to EventBridge as events. T +If you have EventBridge rules defined for findings in Security Hub CSPM, the rules could overlap with rules defined for Security Hub. To avoid sending duplicate findings, evaluate the rules you have defined for Security Hub CSPM to determine if they overlap with rules you are have defined for Security Hub. Where applicable disable any Security Hub CSPM rules that are replaced by Security Hub rules. + +###### Note +