AWS systems-manager documentation change
Summary
Updated IAM policy references from Security Hub to Security Hub CSPM across multiple sections including policy descriptions and change history
Security assessment
Consistently updates IAM policy documentation to reflect CSPM branding. IAM policies are security components, but the change doesn't indicate any policy vulnerability fix. Documents updated security permissions.
Diff
diff --git a/systems-manager/latest/userguide/security-iam-awsmanpol.md b/systems-manager/latest/userguide/security-iam-awsmanpol.md index 37175636c..c9586eeb2 100644 --- a//systems-manager/latest/userguide/security-iam-awsmanpol.md +++ b//systems-manager/latest/userguide/security-iam-awsmanpol.md @@ -146 +146 @@ The action `resource-explorer-2:CreateManagedView` is allowed for the `arn:aws:r - * `securityhub` – Allows principals to retrieve information about AWS Security Hub hub resources in the current account. + * `securityhub` – Allows principals to retrieve information about AWS Security Hub CSPM hub resources in the current account. @@ -194 +194 @@ You can't attach `AWSSystemsManagerOpsDataSyncServiceRolePolicy` to your IAM ent -`AWSSystemsManagerOpsDataSyncServiceRolePolicy` allows the `AWSServiceRoleForSystemsManagerOpsDataSync` service-linked role to create and update OpsItems and OpsData from AWS Security Hub findings. +`AWSSystemsManagerOpsDataSyncServiceRolePolicy` allows the `AWSServiceRoleForSystemsManagerOpsDataSync` service-linked role to create and update OpsItems and OpsData from AWS Security Hub CSPM findings. @@ -1349,2 +1349,2 @@ AmazonSSMManagedEC2InstanceDefaultPolicy – New policy | Systems Manager added -AmazonSSMServiceRolePolicy – Update to an existing policy | Systems Manager added new permissions to allow Explorer to create a managed rule when you turn on Security Hub from Explorer or OpsCenter. New permissions were added to check that config and the compute-optimizer meet the necessary requirements before allowing OpsData. | April 27, 2021 -AWSSystemsManagerOpsDataSyncServiceRolePolicy – New policy | Systems Manager added a new policy to create and update OpsItems and OpsData from Security Hub findings in Explorer and OpsCenter. | April 27, 2021 +AmazonSSMServiceRolePolicy – Update to an existing policy | Systems Manager added new permissions to allow Explorer to create a managed rule when you turn on Security Hub CSPM from Explorer or OpsCenter. New permissions were added to check that config and the compute-optimizer meet the necessary requirements before allowing OpsData. | April 27, 2021 +AWSSystemsManagerOpsDataSyncServiceRolePolicy – New policy | Systems Manager added a new policy to create and update OpsItems and OpsData from Security Hub CSPM findings in Explorer and OpsCenter. | April 27, 2021