AWS securityhub documentation change
Summary
Updated documentation to rebrand controls from 'Security Hub' to 'Security Hub CSPM' across titles, descriptions, and parameter tables. Changed references to default values and Config rules to include CSPM designation.
Security assessment
Changes are purely cosmetic rebranding (adding 'CSPM' to product names). No security vulnerabilities, features, or configurations are modified. The security controls themselves remain unchanged.
Diff
diff --git a/securityhub/latest/userguide/redshift-controls.md b/securityhub/latest/userguide/redshift-controls.md index c50b0449f..8e1bc1c36 100644 --- a//securityhub/latest/userguide/redshift-controls.md +++ b//securityhub/latest/userguide/redshift-controls.md @@ -7 +7 @@ -# Security Hub controls for Amazon Redshift +# Security Hub CSPM controls for Amazon Redshift @@ -9 +9 @@ -These AWS Security Hub controls evaluate the Amazon Redshift service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). +These AWS Security Hub CSPM controls evaluate the Amazon Redshift service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). @@ -77 +77 @@ To update an Amazon Redshift parameter group to require encryption, see [Modifyi -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value @@ -81 +81 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -This control checks whether an Amazon Redshift cluster has automated snapshots enabled, and a retention period greater than or equal to the specified time frame. The control fails if automated snapshots aren't enabled for the cluster, or if the retention period is less than the specified time frame. Unless you provide a custom parameter value for the snapshot retention period, Security Hub uses a default value of 7 days. +This control checks whether an Amazon Redshift cluster has automated snapshots enabled, and a retention period greater than or equal to the specified time frame. The control fails if automated snapshots aren't enabled for the cluster, or if the retention period is less than the specified time frame. Unless you provide a custom parameter value for the snapshot retention period, Security Hub CSPM uses a default value of 7 days. @@ -99 +99 @@ To update the snapshot retention period for an Amazon Redshift cluster, see [Mod -**AWS Config rule:** `redshift-cluster-audit-logging-enabled` (custom Security Hub rule) +**AWS Config rule:** `redshift-cluster-audit-logging-enabled` (custom Security Hub CSPM rule) @@ -230 +230 @@ To modify a Redshift cluster to use KMS encryption, see [Changing cluster encryp -**AWS Config rule:** `tagged-redshift-cluster` (custom Security Hub rule) +**AWS Config rule:** `tagged-redshift-cluster` (custom Security Hub CSPM rule) @@ -236 +236 @@ To modify a Redshift cluster to use KMS encryption, see [Changing cluster encryp -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value @@ -260 +260 @@ To add tags to a Redshift cluster, see [Tagging resources in Amazon Redshift](ht -**AWS Config rule:** `tagged-redshift-eventsubscription` (custom Security Hub rule) +**AWS Config rule:** `tagged-redshift-eventsubscription` (custom Security Hub CSPM rule) @@ -266 +266 @@ To add tags to a Redshift cluster, see [Tagging resources in Amazon Redshift](ht -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value @@ -290 +290 @@ To add tags to a Redshift event notification subscription, see [Tagging resource -**AWS Config rule:** `tagged-redshift-clustersnapshot` (custom Security Hub rule) +**AWS Config rule:** `tagged-redshift-clustersnapshot` (custom Security Hub CSPM rule) @@ -296 +296 @@ To add tags to a Redshift event notification subscription, see [Tagging resource -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value @@ -320 +320 @@ To add tags to a Redshift cluster snapshot, see [Tagging resources in Amazon Red -**AWS Config rule:** `tagged-redshift-clustersubnetgroup` (custom Security Hub rule) +**AWS Config rule:** `tagged-redshift-clustersubnetgroup` (custom Security Hub CSPM rule) @@ -326 +326 @@ To add tags to a Redshift cluster snapshot, see [Tagging resources in Amazon Red -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value @@ -402 +402 @@ To modify a Redshift cluster subnet group to span multiple AZs, see [Modifying a -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value