AWS controltower documentation change
Summary
Updated terminology from 'Security Hub' to 'Security Hub CSPM' throughout the document, including drift detection types, standard names, and API references.
Security assessment
The changes reflect rebranding/renaming of Security Hub features to Security Hub CSPM (Cloud Security Posture Management). While this updates security documentation, there's no evidence of a vulnerability being addressed. The modifications maintain existing security functionality without indicating any security incident resolution.
Diff
diff --git a/controltower/latest/userguide/governance-drift.md b/controltower/latest/userguide/governance-drift.md index 32cb3c79d..66ad73038 100644 --- a//controltower/latest/userguide/governance-drift.md +++ b//controltower/latest/userguide/governance-drift.md @@ -5 +5 @@ -Moved member accountRemoved member accountUnplanned update to managed SCPSCP detached from managed OUDeleted Foundational OUSecurity Hub control driftControl policy driftTrusted access disabledInheritance drift on enabled baselinesInheritance drift on enabled controlsEventBridge creation +Moved member accountRemoved member accountUnplanned update to managed SCPSCP detached from managed OUDeleted Foundational OUSecurity Hub CSPM control driftControl policy driftTrusted access disabledInheritance drift on enabled baselinesInheritance drift on enabled controlsEventBridge creation @@ -56 +56 @@ A special case of landing zone drift is _role drift_ , which is detected when a -AWS Control Tower reports _control drift_ regarding controls implemented with resource control policies (RCPs), declarative policies and controls that are part of the **AWS Security Hub Service-managed Standard: AWS Control Tower**. +AWS Control Tower reports _control drift_ regarding controls implemented with resource control policies (RCPs), declarative policies and controls that are part of the **AWS Security Hub CSPM Service-managed Standard: AWS Control Tower**. @@ -58 +58 @@ AWS Control Tower reports _control drift_ regarding controls implemented with re - * Security Hub control drift + * Security Hub CSPM control drift @@ -252 +252 @@ For more information about resolving drift for accounts and OUs, see [If you man -## Security Hub control drift +## Security Hub CSPM control drift @@ -254 +254 @@ For more information about resolving drift for accounts and OUs, see [If you man -This type of drift occurs when a control that's part of the **AWS Security Hub Service-Managed Standard: AWS Control Tower** reports a state of drift. The AWS Security Hub service itself does not report a state of drift for these controls. Instead, the service sends its findings to AWS Control Tower. +This type of drift occurs when a control that's part of the **AWS Security Hub CSPM Service-Managed Standard: AWS Control Tower** reports a state of drift. The AWS Security Hub CSPM service itself does not report a state of drift for these controls. Instead, the service sends its findings to AWS Control Tower. @@ -256 +256 @@ This type of drift occurs when a control that's part of the **AWS Security Hub S -Security Hub control drift also can be detected if AWS Control Tower has not received a status update from Security Hub in more than 24 hours. If those findings are not received as expected, AWS Control Tower verifies that the control is in drift. The following example shows a drift notification you may receive when this type of drift is detected. +Security Hub CSPM control drift also can be detected if AWS Control Tower has not received a status update from Security Hub CSPM in more than 24 hours. If those findings are not received as expected, AWS Control Tower verifies that the control is in drift. The following example shows a drift notification you may receive when this type of drift is detected. @@ -305 +305 @@ The following example shows a drift notification you may receive when this type -The easiest resolution for control policy drift on RCP controls, declarative policy controls, and Security Hub controls enabled in AWS Control Tower is to call the `ResetEnabledControl` API. +The easiest resolution for control policy drift on RCP controls, declarative policy controls, and Security Hub CSPM controls enabled in AWS Control Tower is to call the `ResetEnabledControl` API.