AWS controlcatalog documentation change
Summary
Updated 'AWS Security Hub check' to 'AWS Security Hub CSPM check' in control implementation examples
Security assessment
The change reflects product naming refinement (adding CSPM designation) but doesn't address security vulnerabilities or document new security features.
Diff
diff --git a/controlcatalog/latest/userguide/ontology-overview.md b/controlcatalog/latest/userguide/ontology-overview.md index 6fb691374..9d20c8e0c 100644 --- a//controlcatalog/latest/userguide/ontology-overview.md +++ b//controlcatalog/latest/userguide/ontology-overview.md @@ -25 +25 @@ For example, **PCI-DSS v3.2.1. ID 4.1** _Use strong cryptography and security pr - * **Control implementations and control evidence.** The ontology has a concept of _Control implementations_ (L6) that can represent either a specific control implementation in AWS, for example, an AWS Control Tower control, an AWS Security Hub check, an AWS Config rule, and so forth, or a non-technical implementation outside AWS, such as process guidance. A separate concept of _Control evidence_ (L7) represents data sources that can be used as evidence for controls by AWS Audit Manager, third-party tools, or customers themselves. These evidence sources could be AWS sources such as AWS CloudTrail events, API call logs, and AWS Config rule evaluation results. Or, they could be external sources such as customer documentation. + * **Control implementations and control evidence.** The ontology has a concept of _Control implementations_ (L6) that can represent either a specific control implementation in AWS, for example, an AWS Control Tower control, an AWS Security Hub CSPM check, an AWS Config rule, and so forth, or a non-technical implementation outside AWS, such as process guidance. A separate concept of _Control evidence_ (L7) represents data sources that can be used as evidence for controls by AWS Audit Manager, third-party tools, or customers themselves. These evidence sources could be AWS sources such as AWS CloudTrail events, API call logs, and AWS Config rule evaluation results. Or, they could be external sources such as customer documentation.