AWS securityhub documentation change
Summary
Updated documentation to refer to 'Security Hub CSPM controls', clarified that CSPM doesn't populate CloudWatch log parameters, and updated custom rule references and parameter values to 'Security Hub CSPM' terminology
Security assessment
Changes involve branding updates (adding 'CSPM') and documentation clarifications without addressing specific vulnerabilities. Log publishing and TLS encryption requirements remain unchanged.
Diff
diff --git a/securityhub/latest/userguide/opensearch-controls.md b/securityhub/latest/userguide/opensearch-controls.md index de9b3af15..466011bc1 100644 --- a//securityhub/latest/userguide/opensearch-controls.md +++ b//securityhub/latest/userguide/opensearch-controls.md @@ -7 +7 @@ -# Security Hub controls for Amazon OpenSearch Service +# Security Hub CSPM controls for Amazon OpenSearch Service @@ -9 +9 @@ -These AWS Security Hub controls evaluate the Amazon OpenSearch Service (OpenSearch Service) service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). +These AWS Security Hub CSPM controls evaluate the Amazon OpenSearch Service (OpenSearch Service) service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). @@ -136 +136 @@ To enable log publishing, see [Enabling log publishing (console)](https://docs.a - * `cloudWatchLogsLogGroupArnList` (not customizable) – Security Hub does not populate this parameter. Comma-separated list of CloudWatch Logs log groups that should be configured for audit logs. + * `cloudWatchLogsLogGroupArnList` (not customizable) – Security Hub CSPM does not populate this parameter. Comma-separated list of CloudWatch Logs log groups that should be configured for audit logs. @@ -245 +245 @@ To enable TLS encryption, use the [UpdateDomainConfig](https://docs.aws.amazon.c -**AWS Config rule:** `tagged-opensearch-domain` (custom Security Hub rule) +**AWS Config rule:** `tagged-opensearch-domain` (custom Security Hub CSPM rule) @@ -251 +251 @@ To enable TLS encryption, use the [UpdateDomainConfig](https://docs.aws.amazon.c -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value