AWS Security ChangesHomeSearch

AWS prescriptive-guidance documentation change

Service: prescriptive-guidance · 2025-12-10 · Documentation low

File: prescriptive-guidance/latest/patterns/deploy-detective-attribute-based-access-controls-for-public-subnets-by-using-aws-config.md

Summary

Added CSPM references to AWS Security Hub documentation links and descriptions

Security assessment

Changes add references to Cloud Security Posture Management (CSPM) capabilities in Security Hub documentation links, enhancing clarity about security monitoring features but not addressing specific vulnerabilities.

Diff

diff --git a/prescriptive-guidance/latest/patterns/deploy-detective-attribute-based-access-controls-for-public-subnets-by-using-aws-config.md b/prescriptive-guidance/latest/patterns/deploy-detective-attribute-based-access-controls-for-public-subnets-by-using-aws-config.md
index 248a68450..82a2adb06 100644
--- a//prescriptive-guidance/latest/patterns/deploy-detective-attribute-based-access-controls-for-public-subnets-by-using-aws-config.md
+++ b//prescriptive-guidance/latest/patterns/deploy-detective-attribute-based-access-controls-for-public-subnets-by-using-aws-config.md
@@ -42 +42 @@ To achieve this, this pattern uses [AWS Config custom rules](https://docs.aws.am
-  * (Optional) A central security account that is the delegated administrator for AWS Config and AWS Security Hub
+  * (Optional) A central security account that is the delegated administrator for AWS Config and AWS Security Hub CSPM
@@ -63 +63 @@ The diagram illustrates the following:
-Note: If this account is a member account in AWS Organizations, you can send compliance data to a central security account through AWS Config or AWS Security Hub.  
+Note: If this account is a member account in AWS Organizations, you can send compliance data to a central security account through AWS Config or AWS Security Hub CSPM.  
@@ -85 +85 @@ You can scale this solution by:
-  * Integrating AWS Config with AWS Security Hub in order to capture, centralize, and notify at scale. For more information, see [Configuring AWS Config](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-prereq-config.html) in the AWS Security Hub documentation.
+  * Integrating AWS Config with AWS Security Hub CSPM in order to capture, centralize, and notify at scale. For more information, see [Configuring AWS Config](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-prereq-config.html) in the AWS Security Hub CSPM documentation.