AWS securityhub documentation change
Summary
Updated CSPM branding. Changed 'Security Hub controls' to 'Security Hub CSPM controls' and updated config rule reference from 'custom Security Hub rule' to 'custom Security Hub CSPM rule'.
Security assessment
Changes only introduce CSPM terminology without modifying KMS key management policies, deletion safeguards, or other security content. No evidence of security vulnerability being addressed.
Diff
diff --git a/securityhub/latest/userguide/kms-controls.md b/securityhub/latest/userguide/kms-controls.md index ba0d96832..1bd7a09f1 100644 --- a//securityhub/latest/userguide/kms-controls.md +++ b//securityhub/latest/userguide/kms-controls.md @@ -7 +7 @@ -# Security Hub controls for AWS KMS +# Security Hub CSPM controls for AWS KMS @@ -9 +9 @@ -These AWS Security Hub controls evaluate the AWS Key Management Service (AWS KMS) service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). +These AWS Security Hub CSPM controls evaluate the AWS Key Management Service (AWS KMS) service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). @@ -98 +98 @@ To modify an IAM inline policy, see [Editing inline policies](https://docs.aws.a -**AWS Config rule:** `kms-cmk-not-scheduled-for-deletion-2` (custom Security Hub rule) +**AWS Config rule:** `kms-cmk-not-scheduled-for-deletion-2` (custom Security Hub CSPM rule)