AWS organizations documentation change
Summary
Updated documentation to replace references to 'Security Hub' with 'Security Hub CSPM' throughout the file, including section titles, service-linked role descriptions, and administrative procedures.
Security assessment
The changes introduce references to 'Security Hub CSPM' (Cloud Security Posture Management), which is a security-focused feature. However, there is no evidence of addressing a specific security vulnerability or incident. The updates appear to clarify or rebrand existing security documentation rather than mitigate a security issue.
Diff
diff --git a/organizations/latest/userguide/services-that-can-integrate-securityhub.md b/organizations/latest/userguide/services-that-can-integrate-securityhub.md index 87880c796..2798db24f 100644 --- a//organizations/latest/userguide/services-that-can-integrate-securityhub.md +++ b//organizations/latest/userguide/services-that-can-integrate-securityhub.md @@ -5 +5 @@ -Service-linked rolesService principalsEnable trusted accessDisable trusted accessEnabling a delegated administrator for Security HubDisabling a delegated administrator for Security Hub +Service-linked rolesService principalsEnable trusted accessDisable trusted accessEnabling a delegated administrator for Security Hub CSPMDisabling a delegated administrator for Security Hub CSPM @@ -7 +7 @@ Service-linked rolesService principalsEnable trusted accessDisable trusted acces -# AWS Security Hub and AWS Organizations +# AWS Security Hub CSPM and AWS Organizations @@ -9 +9 @@ Service-linked rolesService principalsEnable trusted accessDisable trusted acces -AWS Security Hub provides you with a comprehensive view of your security state in AWS and helps you check your environment against security industry standards and best practices. +AWS Security Hub CSPM provides you with a comprehensive view of your security state in AWS and helps you check your environment against security industry standards and best practices. @@ -11 +11 @@ AWS Security Hub provides you with a comprehensive view of your security state i -Security Hub collects security data from across your AWS accounts, the AWS services you use, and supported third-party partner products. It helps you to analyze your security trends and identify the highest priority security issues. +Security Hub CSPM collects security data from across your AWS accounts, the AWS services you use, and supported third-party partner products. It helps you to analyze your security trends and identify the highest priority security issues. @@ -13 +13 @@ Security Hub collects security data from across your AWS accounts, the AWS servi -When you use both Security Hub and AWS Organizations together, you can automatically enable Security Hub for all of your accounts, including new accounts as they are added. This increases the coverage for Security Hub checks and findings, which provides a more comprehensive and accurate picture of your overall security posture. +When you use both Security Hub CSPM and AWS Organizations together, you can automatically enable Security Hub CSPM for all of your accounts, including new accounts as they are added. This increases the coverage for Security Hub CSPM checks and findings, which provides a more comprehensive and accurate picture of your overall security posture. @@ -15 +15 @@ When you use both Security Hub and AWS Organizations together, you can automatic -For more information about Security Hub, see the _[AWS Security Hub User Guide](https://docs.aws.amazon.com/securityhub/latest/userguide/)_. +For more information about Security Hub CSPM, see the _[AWS Security Hub CSPM User Guide](https://docs.aws.amazon.com/securityhub/latest/userguide/)_. @@ -17 +17 @@ For more information about Security Hub, see the _[AWS Security Hub User Guide]( -Use the following information to help you integrate AWS Security Hub with AWS Organizations. +Use the following information to help you integrate AWS Security Hub CSPM with AWS Organizations. @@ -21 +21 @@ Use the following information to help you integrate AWS Security Hub with AWS Or -The following [service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html) is automatically created in your organization's management account when you enable trusted access. This role allows Security Hub to perform supported operations within your organization's accounts in your organization. +The following [service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html) is automatically created in your organization's management account when you enable trusted access. This role allows Security Hub CSPM to perform supported operations within your organization's accounts in your organization. @@ -23 +23 @@ The following [service-linked role](https://docs.aws.amazon.com/IAM/latest/UserG -You can delete or modify this role only if you disable trusted access between Security Hub and Organizations, or if you remove the member account from the organization. +You can delete or modify this role only if you disable trusted access between Security Hub CSPM and Organizations, or if you remove the member account from the organization. @@ -32 +32 @@ You can delete or modify this role only if you disable trusted access between Se -The service-linked role in the previous section can be assumed only by the service principals authorized by the trust relationships defined for the role. The service-linked roles used by Security Hub grant access to the following service principals: +The service-linked role in the previous section can be assumed only by the service principals authorized by the trust relationships defined for the role. The service-linked roles used by Security Hub CSPM grant access to the following service principals: @@ -39 +39 @@ The service-linked role in the previous section can be assumed only by the servi -## Enabling trusted access with Security Hub +## Enabling trusted access with Security Hub CSPM @@ -43 +43 @@ For information about the permissions needed to enable trusted access, see [Perm -When you designate a delegated administrator for Security Hub, Security Hub automatically enables trusted access for Security Hub in your organization. +When you designate a delegated administrator for Security Hub CSPM, Security Hub CSPM automatically enables trusted access for Security Hub in your organization. @@ -45 +45 @@ When you designate a delegated administrator for Security Hub, Security Hub auto -## Disabling trusted access with Security Hub +## Disabling trusted access with Security Hub CSPM @@ -49 +49 @@ For information about the permissions needed to disable trusted access, see [Per -Before you disable trusted access, we recommend working with the delegated administrator for your organization to disable Security Hub in member accounts and to clean up Security Hub resources in those accounts. +Before you disable trusted access, we recommend working with the delegated administrator for your organization to disable Security Hub CSPM in member accounts and to clean up Security Hub CSPM resources in those accounts. @@ -51 +51 @@ Before you disable trusted access, we recommend working with the delegated admin -You can disable trusted access by using the AWS Organizations console, Organizations API, or the AWS CLI. Only an administrator of the Organizations management account can disable trusted access with Security Hub. +You can disable trusted access by using the AWS Organizations console, Organizations API, or the AWS CLI. Only an administrator of the Organizations management account can disable trusted access with Security Hub CSPM. @@ -53 +53 @@ You can disable trusted access by using the AWS Organizations console, Organizat -For instructions on disabling trusted access with Security Hub, see [Disabling Security Hub integration with AWS Organizations](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#disable-orgs-integration). +For instructions on disabling trusted access with Security Hub CSPM, see [Disabling Security Hub CSPM integration with AWS Organizations](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#disable-orgs-integration). @@ -55 +55 @@ For instructions on disabling trusted access with Security Hub, see [Disabling S -## Enabling a delegated administrator for Security Hub +## Enabling a delegated administrator for Security Hub CSPM @@ -57 +57 @@ For instructions on disabling trusted access with Security Hub, see [Disabling S -When you designate a member account as a delegated administrator for the organization, users and roles from that account can perform administrative actions for Security Hub that otherwise can be performed only by users or roles in the organization's management account. This helps you to separate management of the organization from management of Security Hub. +When you designate a member account as a delegated administrator for the organization, users and roles from that account can perform administrative actions for Security Hub CSPM that otherwise can be performed only by users or roles in the organization's management account. This helps you to separate management of the organization from management of Security Hub CSPM. @@ -59 +59 @@ When you designate a member account as a delegated administrator for the organiz -For information, see [Designating a Security Hub administrator account](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html) in the _AWS Security Hub User Guide_. +For information, see [Designating a Security Hub CSPM administrator account](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html) in the _AWS Security Hub CSPM User Guide_. @@ -61 +61 @@ For information, see [Designating a Security Hub administrator account](https:// -###### To designate a member account as a delegated administrator for Security Hub +###### To designate a member account as a delegated administrator for Security Hub CSPM @@ -67 +67 @@ For information, see [Designating a Security Hub administrator account](https:// - * If your management account does not have Security Hub enabled, then on the Security Hub console, choose **Go to Security Hub**. + * If your management account does not have Security Hub CSPM enabled, then on the Security Hub CSPM console, choose **Go to Security Hub CSPM**. @@ -69 +69 @@ For information, see [Designating a Security Hub administrator account](https:// - * If your management account does have Security Hub enabled, then on the Security Hub console, under **General** choose **Settings**. + * If your management account does have Security Hub CSPM enabled, then on the Security Hub CSPM console, under **General** choose **Settings**. @@ -76 +76 @@ For information, see [Designating a Security Hub administrator account](https:// -## Disabling a delegated administrator for Security Hub +## Disabling a delegated administrator for Security Hub CSPM @@ -78 +78 @@ For information, see [Designating a Security Hub administrator account](https:// -Only the organization management account can remove the delegated Security Hub administrator account. +Only the organization management account can remove the delegated Security Hub CSPM administrator account. @@ -80 +80 @@ Only the organization management account can remove the delegated Security Hub a -To change the delegated Security Hub administrator, you must first remove the current delegated administrator account and then designate a new one. +To change the delegated Security Hub CSPM administrator, you must first remove the current delegated administrator account and then designate a new one. @@ -82 +82 @@ To change the delegated Security Hub administrator, you must first remove the cu -If you use the Security Hub console to remove the delegated administrator in one Region, it is automatically removed in all Regions. +If you use the Security Hub CSPM console to remove the delegated administrator in one Region, it is automatically removed in all Regions. @@ -84 +84 @@ If you use the Security Hub console to remove the delegated administrator in one -The Security Hub API only removes the delegated Security Hub administrator account from the Region where the API call or command is issued. You must repeat the action in other Regions. +The Security Hub CSPM API only removes the delegated Security Hub CSPM administrator account from the Region where the API call or command is issued. You must repeat the action in other Regions. @@ -86 +86 @@ The Security Hub API only removes the delegated Security Hub administrator accou -If you use the Organizations API to remove the delegated Security Hub administrator account, it is automatically removed in all Regions. +If you use the Organizations API to remove the delegated Security Hub CSPM administrator account, it is automatically removed in all Regions. @@ -88 +88 @@ If you use the Organizations API to remove the delegated Security Hub administra -For instructions on disabling the delegated Security Hub administrator, see [Removing or changing the delegated administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#remove-admin-overview). +For instructions on disabling the delegated Security Hub CSPM administrator, see [Removing or changing the delegated administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#remove-admin-overview).