AWS controltower documentation change
Summary
Updated references from 'Security Hub Service-managed Standard' to 'Security Hub CSPM Service-managed Standard' and aligned terminology for Security Hub CSPM controls
Security assessment
The changes reflect rebranding/alignment with Security Hub CSPM (Cloud Security Posture Management) terminology but do not address a specific security vulnerability. CSPM is a security feature, so documentation updates about its integration qualify as security documentation additions.
Diff
diff --git a/controltower/latest/userguide/2024-all.md b/controltower/latest/userguide/2024-all.md index 964782fd3..362ba770e 100644 --- a//controltower/latest/userguide/2024-all.md +++ b//controltower/latest/userguide/2024-all.md @@ -138 +138 @@ These new RCP-based preventive controls are available in AWS Regions where AWS C -AWS Control Tower now reports control policy drift, for controls implemented with resource control policies (RCPs), and controls that are part of the **Security Hub Service-managed Standard: AWS Control Tower**. This type of drift can be remediated through the new `ResetEnabledControl` API. For more information, see [Types of governance drift](https://docs.aws.amazon.com/controltower/latest/userguide/governance-drift.html). +AWS Control Tower now reports control policy drift, for controls implemented with resource control policies (RCPs), and controls that are part of the **Security Hub CSPM Service-managed Standard: AWS Control Tower**. This type of drift can be remediated through the new `ResetEnabledControl` API. For more information, see [Types of governance drift](https://docs.aws.amazon.com/controltower/latest/userguide/governance-drift.html). @@ -175 +175 @@ For more information, see the [`GetControl` API](https://docs.aws.amazon.com//co - * All existing AWS Security Hub controls have their `Implementation` parameter value changed from AWS Config rule to AWS Security Hub. The corresponding console help panel is modified to reflect this change. + * All existing AWS Security Hub CSPM controls have their `Implementation` parameter value changed from AWS Config rule to AWS Security Hub CSPM. The corresponding console help panel is modified to reflect this change. @@ -297 +297 @@ Account Factory Customizations (AFC), Account Factory for Terraform (AFT), and C -Proactive controls and controls for the **AWS Security Hub Service-Managed Standard: AWS Control Tower** are not available in Canada West (Calgary) Region. The preventive control `CT.CLOUDFORMATION.PR.1` is not available in Canada West (Calgary) because it is required only for activating the hook-based, proactive controls. Certain detective controls based on AWS Config are not available. For details, see [Control limitations](./control-limitations.html). +Proactive controls and controls for the **AWS Security Hub CSPM Service-Managed Standard: AWS Control Tower** are not available in Canada West (Calgary) Region. The preventive control `CT.CLOUDFORMATION.PR.1` is not available in Canada West (Calgary) because it is required only for activating the hook-based, proactive controls. Certain detective controls based on AWS Config are not available. For details, see [Control limitations](./control-limitations.html).