AWS securityhub documentation change
Summary
Updated title and content to replace 'Security Hub' with 'Security Hub CSPM' terminology. Modified control descriptions to reference CSPM instead of generic Security Hub.
Security assessment
Changes are branding updates (Security Hub → Security Hub CSPM) without modifying security requirements. No vulnerabilities or security improvements are addressed. The control logic remains identical.
Diff
diff --git a/securityhub/latest/userguide/lambda-controls.md b/securityhub/latest/userguide/lambda-controls.md index 4e903bc89..bf0eee2fd 100644 --- a//securityhub/latest/userguide/lambda-controls.md +++ b//securityhub/latest/userguide/lambda-controls.md @@ -7 +7 @@ -# Security Hub controls for AWS Lambda +# Security Hub CSPM controls for AWS Lambda @@ -9 +9 @@ -These AWS Security Hub controls evaluate the AWS Lambda service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). +These AWS Security Hub CSPM controls evaluate the AWS Lambda service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). @@ -69 +69 @@ Replace ``<function-name>`` with the name of the Lambda function, and ``<stateme -This control checks whether AWS Lambda function runtime settings match the expected values set for the supported runtimes in each language. The control fails if the Lambda function doesn't use a supported runtime, as noted in the Parameters section. Security Hub ignores functions that have a package type of `Image`. +This control checks whether AWS Lambda function runtime settings match the expected values set for the supported runtimes in each language. The control fails if the Lambda function doesn't use a supported runtime, as noted in the Parameters section. Security Hub CSPM ignores functions that have a package type of `Image`. @@ -93 +93 @@ For more information about supported runtimes and deprecation schedules, see [Ru -This control checks whether a Lambda function is deployed in a virtual private cloud (VPC). The control fails if the Lambda function isn't deployed in a VPC. Security Hub doesn't evaluate the VPC subnet routing configuration to determine public reachability. You might see failed findings for Lambda@Edge resources. +This control checks whether a Lambda function is deployed in a virtual private cloud (VPC). The control fails if the Lambda function isn't deployed in a VPC. Security Hub CSPM doesn't evaluate the VPC subnet routing configuration to determine public reachability. You might see failed findings for Lambda@Edge resources. @@ -117 +117 @@ To configure an existing function to connect to private subnets in your VPC, see -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value @@ -121 +121 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -This control checks if an AWS Lambda function that connects to a virtual private cloud (VPC) operates in at least the specified number of Availability Zone (AZs). The control fails if the function doesn't operate in at least the specified number of AZs. Unless you provide a custom parameter value for the minimum number of AZs, Security Hub uses a default value of two AZs. +This control checks if an AWS Lambda function that connects to a virtual private cloud (VPC) operates in at least the specified number of Availability Zone (AZs). The control fails if the function doesn't operate in at least the specified number of AZs. Unless you provide a custom parameter value for the minimum number of AZs, Security Hub CSPM uses a default value of two AZs. @@ -139 +139 @@ Lambda automatically runs other functions in multiple AZs to ensure that it is a -**AWS Config rule:** `tagged-lambda-function` (custom Security Hub rule) +**AWS Config rule:** `tagged-lambda-function` (custom Security Hub CSPM rule) @@ -145 +145 @@ Lambda automatically runs other functions in multiple AZs to ensure that it is a -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value