AWS securityhub documentation change
Summary
Updated document title and references from 'Security Hub controls' to 'Security Hub CSPM controls'. Changed table headers from 'Security Hub default value' to 'Security Hub CSPM default value'. Updated historical note about control title change.
Security assessment
Changes are terminology updates adding 'CSPM' branding without modifying security guidance or addressing vulnerabilities. Historical note update doesn't indicate new security concerns.
Diff
diff --git a/securityhub/latest/userguide/sagemaker-controls.md b/securityhub/latest/userguide/sagemaker-controls.md index bc88541a5..3e5277bc7 100644 --- a//securityhub/latest/userguide/sagemaker-controls.md +++ b//securityhub/latest/userguide/sagemaker-controls.md @@ -7 +7 @@ -# Security Hub controls for SageMaker AI +# Security Hub CSPM controls for SageMaker AI @@ -9 +9 @@ -These AWS Security Hub controls evaluate the Amazon SageMaker AI service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). +These AWS Security Hub CSPM controls evaluate the Amazon SageMaker AI service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). @@ -131 +131 @@ SageMaker AI training and deployed inference containers are internet-enabled by -On August 13, 2025, Security Hub changed the title and description of this control. The new title and description more accurately reflect that the control checks the setting for the `EnableNetworkIsolation` parameter of Amazon SageMaker AI hosted models. Previously, the title of this control was: _SageMaker models should block inbound traffic_. +On August 13, 2025, Security Hub CSPM changed the title and description of this control. The new title and description more accurately reflect that the control checks the setting for the `EnableNetworkIsolation` parameter of Amazon SageMaker AI hosted models. Previously, the title of this control was: _SageMaker models should block inbound traffic_. @@ -151 +151 @@ For more information about network isolation for SageMaker AI models, see [Run t -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value @@ -181 +181 @@ To add tags to an Amazon SageMaker AI app image configuration (`AppImageConfig`) -Parameter | Description | Type | Allowed custom values | Security Hub default value +Parameter | Description | Type | Allowed custom values | Security Hub CSPM default value