AWS Security ChangesHomeSearch

AWS securityhub documentation change

Service: securityhub · 2025-12-10 · Documentation low

File: securityhub/latest/userguide/backup-controls.md

Summary

Updated documentation to replace 'Security Hub' with 'Security Hub CSPM' in titles, descriptions, and AWS Config rule references, including parameter tables for backup controls.

Security assessment

Changes are limited to branding terminology updates (Security Hub → Security Hub CSPM) without altering security guidance, adding features, or referencing security vulnerabilities. Existing security controls remain unchanged.

Diff

diff --git a/securityhub/latest/userguide/backup-controls.md b/securityhub/latest/userguide/backup-controls.md
index 1019ef223..89aa03293 100644
--- a//securityhub/latest/userguide/backup-controls.md
+++ b//securityhub/latest/userguide/backup-controls.md
@@ -7 +7 @@
-# Security Hub controls for AWS Backup
+# Security Hub CSPM controls for AWS Backup
@@ -9 +9 @@
-These Security Hub controls evaluate the AWS Backup service and resources.
+These Security Hub CSPM controls evaluate the AWS Backup service and resources.
@@ -45 +45 @@ To encrypt an AWS Backup recovery point, see [Encryption for backups in AWS Back
-**AWS Configrule:** `tagged-backup-recoverypoint` (custom Security Hub rule)
+**AWS Configrule:** `tagged-backup-recoverypoint` (custom Security Hub CSPM rule)
@@ -51 +51 @@ To encrypt an AWS Backup recovery point, see [Encryption for backups in AWS Back
-Parameter | Description | Type | Allowed custom values | Security Hub default value  
+Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value  
@@ -90 +90 @@ Don’t add personally identifiable information (PII) or other confidential or s
-**AWS Configrule:** `tagged-backup-backupvault` (custom Security Hub rule)
+**AWS Configrule:** `tagged-backup-backupvault` (custom Security Hub CSPM rule)
@@ -96 +96 @@ Don’t add personally identifiable information (PII) or other confidential or s
-Parameter | Description | Type | Allowed custom values | Security Hub default value  
+Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value  
@@ -135 +135 @@ Don’t add personally identifiable information (PII) or other confidential or s
-**AWS Configrule:** `tagged-backup-reportplan` (custom Security Hub rule)
+**AWS Configrule:** `tagged-backup-reportplan` (custom Security Hub CSPM rule)
@@ -141 +141 @@ Don’t add personally identifiable information (PII) or other confidential or s
-Parameter | Description | Type | Allowed custom values | Security Hub default value  
+Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value  
@@ -180 +180 @@ Don’t add personally identifiable information (PII) or other confidential or s
-**AWS Configrule:** `tagged-backup-backupplan` (custom Security Hub rule)
+**AWS Configrule:** `tagged-backup-backupplan` (custom Security Hub CSPM rule)
@@ -186 +186 @@ Don’t add personally identifiable information (PII) or other confidential or s
-Parameter | Description | Type | Allowed custom values | Security Hub default value  
+Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value