AWS securityhub documentation change
Summary
Updated documentation to consistently refer to 'Security Hub CSPM' instead of generic 'Security Hub' terminology. Changed default value references and rule descriptions to specify CSPM context.
Security assessment
The changes clarify CSPM-specific controls but do not address any new vulnerabilities or security incidents. Updates emphasize certificate renewal timeframes (security best practice) but this is existing security documentation maintenance rather than new security content.
Diff
diff --git a/securityhub/latest/userguide/acm-controls.md b/securityhub/latest/userguide/acm-controls.md index 010d2e79d..b4485fb6c 100644 --- a//securityhub/latest/userguide/acm-controls.md +++ b//securityhub/latest/userguide/acm-controls.md @@ -7 +7 @@ -# Security Hub controls for AWS Certificate Manager +# Security Hub CSPM controls for AWS Certificate Manager @@ -9 +9 @@ -These AWS Security Hub controls evaluate the AWS Certificate Manager (ACM) service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). +These AWS Security Hub CSPM controls evaluate the AWS Certificate Manager (ACM) service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). @@ -27 +27 @@ These AWS Security Hub controls evaluate the AWS Certificate Manager (ACM) servi -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value @@ -31 +31 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -This control checks whether an AWS Certificate Manager (ACM) certificate is renewed within the specified time period. It checks both imported certificates and certificates provided by ACM. The control fails if the certificate isn't renewed within the specified time period. Unless you provide a custom parameter value for the renewal period, Security Hub uses a default value of 30 days. +This control checks whether an AWS Certificate Manager (ACM) certificate is renewed within the specified time period. It checks both imported certificates and certificates provided by ACM. The control fails if the certificate isn't renewed within the specified time period. Unless you provide a custom parameter value for the renewal period, Security Hub CSPM uses a default value of 30 days. @@ -89 +89 @@ While ACM allows you to import certificates with shorter key lengths, you must u -**AWS Config rule:** `tagged-acm-certificate` (custom Security Hub rule) +**AWS Config rule:** `tagged-acm-certificate` (custom Security Hub CSPM rule) @@ -95 +95 @@ While ACM allows you to import certificates with shorter key lengths, you must u -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value