AWS controltower documentation change
Summary
Updated references from 'Security Hub' to 'Security Hub CSPM' in control documentation and links
Security assessment
Changes reflect branding updates (adding CSPM designation) but do not modify security functionality or address vulnerabilities. Documentation links and control ownership descriptions are updated without altering security recommendations.
Diff
diff --git a/controltower/latest/controlreference/optional-controls.md b/controltower/latest/controlreference/optional-controls.md index 69af22e1f..b7dcc9b96 100644 --- a//controltower/latest/controlreference/optional-controls.md +++ b//controltower/latest/controlreference/optional-controls.md @@ -17 +17 @@ Optional controls in AWS Control Tower are applied at the OU level. You can acti - * [Security Hub controls](https://docs.aws.amazon.com//controltower/latest/controlreference/security-hub-controls.html), which are based on AWS Config rules – these controls are owned by Security Hub and integrated with AWS Control Tower, by means of the **Service-Managed Standard: AWS Control Tower**. + * [Security Hub CSPM controls](https://docs.aws.amazon.com//controltower/latest/controlreference/security-hub-controls.html), which are based on AWS Config rules – these controls are owned by Security Hub CSPM and integrated with AWS Control Tower, by means of the **Service-Managed Standard: AWS Control Tower**. @@ -36 +36 @@ You can view the Regions for each control in the AWS Control Tower console, or b -For more information about the detective controls that cannot be deployed in certain Regions, see the [Regional services list documentation](https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/) to learn more about the Regions where AWS Config is available. If the detective control is implemented as a managed AWS Config rule, see the [Security Hub controls reference documentation](https://docs.aws.amazon.com//securityhub/latest/userguide/securityhub-controls-reference.html). +For more information about the detective controls that cannot be deployed in certain Regions, see the [Regional services list documentation](https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/) to learn more about the Regions where AWS Config is available. If the detective control is implemented as a managed AWS Config rule, see the [Security Hub CSPM controls reference documentation](https://docs.aws.amazon.com//securityhub/latest/userguide/securityhub-controls-reference.html).