AWS prescriptive-guidance documentation change
Summary
Updated reference from AWS Security Hub to AWS Security Hub CSPM for security observability integration
Security assessment
The change specifies CSPM (Cloud Security Posture Management) as part of Security Hub integration, enhancing security documentation by clarifying the posture management capability. No evidence of addressing a specific vulnerability.
Diff
diff --git a/prescriptive-guidance/latest/gen-ai-lifecycle-operational-excellence/dev-security.md b/prescriptive-guidance/latest/gen-ai-lifecycle-operational-excellence/dev-security.md index b5abd8b39..18523779d 100644 --- a//prescriptive-guidance/latest/gen-ai-lifecycle-operational-excellence/dev-security.md +++ b//prescriptive-guidance/latest/gen-ai-lifecycle-operational-excellence/dev-security.md @@ -11 +11 @@ During system design, threat modelling provides the foundation for all subsequen -Fundamental access controls can protect development environments, training data, and model artifacts through appropriate authentication mechanisms. They also help you securely store sensitive data and credentials. Development environments should implement role-based access controls that limit access to training datasets, model configurations, and experimental outputs based on team member responsibilities. Secure credential management and encrypted storage of sensitive artifacts can prevent unauthorized access while maintaining the collaborative nature essential for effective development work. Finally, development environments should be integrated with a [AWS Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/what-are-securityhub-services.html) to support organizational security observability needs. +Fundamental access controls can protect development environments, training data, and model artifacts through appropriate authentication mechanisms. They also help you securely store sensitive data and credentials. Development environments should implement role-based access controls that limit access to training datasets, model configurations, and experimental outputs based on team member responsibilities. Secure credential management and encrypted storage of sensitive artifacts can prevent unauthorized access while maintaining the collaborative nature essential for effective development work. Finally, development environments should be integrated with a [AWS Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/what-are-securityhub-services.html) to support organizational security observability needs.