AWS controltower documentation change
Summary
Updated AWS Security Hub reference to AWS Security Hub CSPM in best practices section
Security assessment
Clarifies the use of CSPM for security recommendations but does not indicate remediation of a security flaw. The change improves accuracy of security feature documentation without addressing vulnerabilities.
Diff
diff --git a/controltower/latest/userguide/2022-all.md b/controltower/latest/userguide/2022-all.md index 191badaaf..2c36ef216 100644 --- a//controltower/latest/userguide/2022-all.md +++ b//controltower/latest/userguide/2022-all.md @@ -80 +80 @@ The AWS Control Tower controls library classifies these controls according to th -With this release, AWS Control Tower also is integrated with AWS Security Hub, by means of the new Security Hub **Service-Managed Standard: AWS Control Tower** , which supports the AWS Foundational Security Best Practices (FSBP) standard. You can view over 160 Security Hub controls alongside AWS Control Tower controls in the console, and you can obtain an Security Hub security score for your AWS Control Tower environment. For more information, see [Security Hub controls](https://docs.aws.amazon.com//controltower/latest/controlreference/security-hub-controls.html). +With this release, AWS Control Tower also is integrated with AWS Security Hub CSPM, by means of the new Security Hub CSPM **Service-Managed Standard: AWS Control Tower** , which supports the AWS Foundational Security Best Practices (FSBP) standard. You can view over 160 Security Hub CSPM controls alongside AWS Control Tower controls in the console, and you can obtain an Security Hub CSPM security score for your AWS Control Tower environment. For more information, see [Security Hub controls](https://docs.aws.amazon.com//controltower/latest/controlreference/security-hub-controls.html). @@ -222 +222 @@ In landing zone version 3.0, AWS Control Tower has updated the baseline configur -This configuration is considered a best practice. It is recommended by AWS Security Hub and AWS Config, and it creates cost savings by reducing the number of configuration items created when global resources are created, modified, or deleted. Previously, each time a global resources was created, updated, or deleted, whether by a customer or by an AWS service, a configuration item was created for each item in each governed Region. +This configuration is considered a best practice. It is recommended by AWS Security Hub CSPM and AWS Config, and it creates cost savings by reducing the number of configuration items created when global resources are created, modified, or deleted. Previously, each time a global resources was created, updated, or deleted, whether by a customer or by an AWS service, a configuration item was created for each item in each governed Region.