AWS chatbot documentation change
Summary
Updated references from 'AWS Security Hub' to 'AWS Security Hub CSPM' throughout the documentation, including service lists, section headers, and integration descriptions.
Security assessment
The change explicitly adds 'CSPM' (Cloud Security Posture Management) to Security Hub references, highlighting a security-focused component of the service. While this clarifies the security posture management aspect, there is no evidence of addressing a specific vulnerability or incident. The update enhances documentation about an existing security feature rather than introducing new security content.
Diff
diff --git a/chatbot/latest/adminguide/related-services.md b/chatbot/latest/adminguide/related-services.md index 89d93b7dd..c12c4fd8a 100644 --- a//chatbot/latest/adminguide/related-services.md +++ b//chatbot/latest/adminguide/related-services.md @@ -5 +5 @@ -AWS Billing and Cost ManagementAWS CloudFormationNotifications for AWS developer toolsAmazon CloudWatch alarmsAmazon EventBridgeAWS ConfigAmazon GuardDutyAWS HealthAWS Security HubAWS Systems ManagerAWS Systems Manager RunbooksAWS Systems Manager Incident Manager +AWS Billing and Cost ManagementAWS CloudFormationNotifications for AWS developer toolsAmazon CloudWatch alarmsAmazon EventBridgeAWS ConfigAmazon GuardDutyAWS HealthAWS Security Hub CSPMAWS Systems ManagerAWS Systems Manager RunbooksAWS Systems Manager Incident Manager @@ -11 +11 @@ AWS Chatbot is now Amazon Q Developer. [Learn more](./service-rename.html) -You can use Amazon Q Developer in chat applications to monitor and receive notifications about other AWS services. Amazon Q Developer in chat applications works with a number of AWS services, including [Amazon CloudWatch](https://console.aws.amazon.com/cloudwatch/), [AWS Security Hub](https://console.aws.amazon.com/securityhub/), and [Amazon GuardDuty](https://console.aws.amazon.com/guardduty/). All services that work with Amazon Q Developer in chat applications use [Amazon SNS topics](https://docs.aws.amazon.com/sns/latest/dg/) as targets to send event and alarm notifications. You may already have established Amazon SNS topics that send notifications to DevOps and development personnel as emails. Because Amazon Q Developer in chat applications redirects those Amazon SNS topics' notifications to chat rooms, you can map those Amazon SNS topics to an Amazon Chime webhook, Microsoft Teams channel, or Slack channel in the Amazon Q Developer in chat applications console. +You can use Amazon Q Developer in chat applications to monitor and receive notifications about other AWS services. Amazon Q Developer in chat applications works with a number of AWS services, including [Amazon CloudWatch](https://console.aws.amazon.com/cloudwatch/), [AWS Security Hub CSPM](https://console.aws.amazon.com/securityhub/), and [Amazon GuardDuty](https://console.aws.amazon.com/guardduty/). All services that work with Amazon Q Developer in chat applications use [Amazon SNS topics](https://docs.aws.amazon.com/sns/latest/dg/) as targets to send event and alarm notifications. You may already have established Amazon SNS topics that send notifications to DevOps and development personnel as emails. Because Amazon Q Developer in chat applications redirects those Amazon SNS topics' notifications to chat rooms, you can map those Amazon SNS topics to an Amazon Chime webhook, Microsoft Teams channel, or Slack channel in the Amazon Q Developer in chat applications console. @@ -41 +41 @@ If you want to customize the message content of default service notifications or - * AWS Security Hub + * AWS Security Hub CSPM @@ -94 +94 @@ You map the Amazon SNS topic to the EventBridge rule, and then map it to a chat -Amazon Q Developer in chat applications can process most AWS service events handled by EventBridge. This includes AWS Config, Amazon GuardDuty, AWS Health, AWS Security Hub, and AWS Systems Manager. Amazon Q Developer in chat applications only supports EventBridge events from AWS services. For an exhaustive list of supported service events, see [EventBridge Event Examples from Supported AWS Services](https://docs.aws.amazon.com//eventbridge/latest/userguide/event-types.html) in the _EventBridge User Guide_. +Amazon Q Developer in chat applications can process most AWS service events handled by EventBridge. This includes AWS Config, Amazon GuardDuty, AWS Health, AWS Security Hub CSPM, and AWS Systems Manager. Amazon Q Developer in chat applications only supports EventBridge events from AWS services. For an exhaustive list of supported service events, see [EventBridge Event Examples from Supported AWS Services](https://docs.aws.amazon.com//eventbridge/latest/userguide/event-types.html) in the _EventBridge User Guide_. @@ -124 +124 @@ For more information, see [Monitoring AWS Health Events with Amazon CloudWatch E -## [AWS Security Hub](https://console.aws.amazon.com/securityhub/) +## [AWS Security Hub CSPM](https://console.aws.amazon.com/securityhub/) @@ -126 +126 @@ For more information, see [Monitoring AWS Health Events with Amazon CloudWatch E -AWS Security Hub provides a comprehensive view of high-priority security alerts and compliance status across your AWS accounts. Security Hub aggregates, organizes, and prioritizes security findings from multiple AWS services, including Amazon GuardDuty, Amazon Inspector, and Amazon Macie. Security Hub reduces the effort of collecting and prioritizing security findings across accounts, from AWS services, and from AWS partner tools. +AWS Security Hub CSPM provides a comprehensive view of high-priority security alerts and compliance status across your AWS accounts. Security Hub CSPM aggregates, organizes, and prioritizes security findings from multiple AWS services, including Amazon GuardDuty, Amazon Inspector, and Amazon Macie. Security Hub CSPM reduces the effort of collecting and prioritizing security findings across accounts, from AWS services, and from AWS partner tools. @@ -128 +128 @@ AWS Security Hub provides a comprehensive view of high-priority security alerts -Security Hub supports two types of integration with [CloudWatch Events rules](https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/Create-CloudWatch-Events-Rule.html), both of which Amazon Q Developer in chat applications supports: +Security Hub CSPM supports two types of integration with [CloudWatch Events rules](https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/Create-CloudWatch-Events-Rule.html), both of which Amazon Q Developer in chat applications supports: @@ -130 +130 @@ Security Hub supports two types of integration with [CloudWatch Events rules](ht - * **Standard CloudWatch Events**. [Security Hub automatically sends all findings to CloudWatch Events](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-cloudwatch-events.html). You can define CloudWatch Events rules that automatically route generated findings to an Amazon Simple Storage Service (Amazon S3) bucket, a remediation workflow, or an SNS topic. Use this method to automatically send all Security Hub findings, or all findings with specific characteristics, to an SNS topic to which Amazon Q Developer in chat applications subscribes. + * **Standard CloudWatch Events**. [Security Hub CSPM automatically sends all findings to CloudWatch Events](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-cloudwatch-events.html). You can define CloudWatch Events rules that automatically route generated findings to an Amazon Simple Storage Service (Amazon S3) bucket, a remediation workflow, or an SNS topic. Use this method to automatically send all Security Hub CSPM findings, or all findings with specific characteristics, to an SNS topic to which Amazon Q Developer in chat applications subscribes. @@ -132 +132 @@ Security Hub supports two types of integration with [CloudWatch Events rules](ht - * **Security Hub Custom Actions**.[ Define custom actions in Security Hub](https://aws.amazon.com/blogs/apn/how-to-enable-custom-actions-in-aws-security-hub/) and configure [CloudWatch Events rules](https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/Create-CloudWatch-Events-Rule.html) to respond to those actions. The event rule uses its SNS topic setting to forward its notifications to the SNS topic to which Amazon Q Developer in chat applications subscribes. + * **Security Hub CSPM Custom Actions**.[ Define custom actions in Security Hub CSPM](https://aws.amazon.com/blogs/apn/how-to-enable-custom-actions-in-aws-security-hub/) and configure [CloudWatch Events rules](https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/Create-CloudWatch-Events-Rule.html) to respond to those actions. The event rule uses its SNS topic setting to forward its notifications to the SNS topic to which Amazon Q Developer in chat applications subscribes.