AWS Security ChangesHomeSearch

AWS controltower documentation change

Service: controltower · 2025-12-10 · Documentation low

File: controltower/latest/userguide/drift.md

Summary

Modified text to reference 'Security Hub CSPM Service-Managed Standard' instead of generic Security Hub controls

Security assessment

The update specifies CSPM-related drift detection capabilities without addressing vulnerabilities. It improves clarity about security monitoring features but doesn't resolve security issues.

Diff

diff --git a/controltower/latest/userguide/drift.md b/controltower/latest/userguide/drift.md
index 19f28b388..c6a9da8b4 100644
--- a//controltower/latest/userguide/drift.md
+++ b//controltower/latest/userguide/drift.md
@@ -25 +25 @@ When the auto-enroll capability for accounts is enabled in **Settings** , these
-For controls that are part of the AWS Security Hub **Service-Managed Standard: AWS Control Tower** , drift is shown on the **Account** and **Account details** pages in the AWS Control Tower console, as well as by means of an Amazon SNS notification.
+For controls that are part of the AWS Security Hub CSPM **Service-Managed Standard: AWS Control Tower** , drift is shown on the **Account** and **Account details** pages in the AWS Control Tower console, as well as by means of an Amazon SNS notification.