AWS waf documentation change

Service: waf · 2025-12-10 · Documentation low

File: waf/latest/developerguide/ddos-viewing-multiple-accounts.md

Summary

Updated references from 'AWS Security Hub' to 'AWS Security Hub CSPM' throughout the document, including in section headers, body text, image captions, and console references. Also fixed a documentation link format.

Security assessment

The changes primarily involve rebranding/referencing 'Security Hub CSPM' instead of generic 'Security Hub'. There's no evidence of addressing vulnerabilities, weaknesses, or security incidents. CSPM (Cloud Security Posture Management) is mentioned as an existing integration point but no new security features or vulnerability mitigations are documented.

Diff

diff --git a/waf/latest/developerguide/ddos-viewing-multiple-accounts.md b/waf/latest/developerguide/ddos-viewing-multiple-accounts.md
index 915fa0d88..b8d69b634 100644
--- a//waf/latest/developerguide/ddos-viewing-multiple-accounts.md
+++ b//waf/latest/developerguide/ddos-viewing-multiple-accounts.md
@@ -7 +7 @@
-You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the updated console experience](./working-with-console.html). 
+You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see [Working with the console](https://docs.aws.amazon.com/waf/latest/developerguide/working-with-console.html). 
@@ -9 +9 @@ You can now use the updated experience to access AWS WAF functionality anywhere
-# Viewing Shield Advanced events across multiple AWS accounts with AWS Firewall Manager and AWS Security Hub
+# Viewing Shield Advanced events across multiple AWS accounts with AWS Firewall Manager and AWS Security Hub CSPM
@@ -11 +11 @@ You can now use the updated experience to access AWS WAF functionality anywhere
-You can use AWS Firewall Manager and AWS Security Hub to manage and monitor AWS Shield Advanced protected resources across multiple accounts. 
+You can use AWS Firewall Manager and AWS Security Hub CSPM to manage and monitor AWS Shield Advanced protected resources across multiple accounts. 
@@ -15 +15 @@ With Firewall Manager, you can create a Shield Advanced security policy that rep
-You can integrate Firewall Manager with AWS Security Hub to get a single dashboard that reports DDoS events that are detected by Shield Advanced and Firewall Manager compliance findings, when Firewall Manager identifies a resource that's out of compliance with your Shield Advanced security policy. 
+You can integrate Firewall Manager with AWS Security Hub CSPM to get a single dashboard that reports DDoS events that are detected by Shield Advanced and Firewall Manager compliance findings, when Firewall Manager identifies a resource that's out of compliance with your Shield Advanced security policy. 
@@ -17 +17 @@ You can integrate Firewall Manager with AWS Security Hub to get a single dashboa
-The following figure depicts a typical architecture for monitoring Shield Advanced protected resources with Firewall Manager and Security Hub. 
+The following figure depicts a typical architecture for monitoring Shield Advanced protected resources with Firewall Manager and Security Hub CSPM. 
@@ -19 +19 @@ The following figure depicts a typical architecture for monitoring Shield Advanc
-![At the top of the figure is an AWS Organizations icon. It has an arrow pointing down that splits to point to two icons that are side by side. The left icon has the title Production OU and the right icon has the title Security OU. Below these icons sit three icons, titled from left to right: AWS Shield Advanced, AWS Firewall Manager, and AWS Security Hub. The production OU icon has an arrow pointing down to the Shield Advanced icon. The security OU icon has an arrow pointing down that splits to point to the Firewall Manager and Security Hub icons. The Shield Advanced icon has an arrow pointing down to a rectangle with the title Shield Advanced protected resources. Inside the rectangle are icons for Application Load Balancer, CloudFront distribution, and Elastic IP address. The Firewall Manager icon also has an arrow pointing down to the Shield Advanced protected resources rectangle, and it's labeled Enforces compliance of protected resources. The Shield Advanced icon has a horizontal arrow pointing to the Firewall Manager icon that's labeled DDoS alarm. The Firewall Manager icon has a horizontal arrow pointing to its right, to the Security Hub icon that's labeled DDoS alarm and compliance findings.](/images/waf/latest/developerguide/images/shield-arch-fms-ash-integration.png)
+![At the top of the figure is an AWS Organizations icon. It has an arrow pointing down that splits to point to two icons that are side by side. The left icon has the title Production OU and the right icon has the title Security OU. Below these icons sit three icons, titled from left to right: AWS Shield Advanced, AWS Firewall Manager, and AWS Security Hub CSPM. The production OU icon has an arrow pointing down to the Shield Advanced icon. The security OU icon has an arrow pointing down that splits to point to the Firewall Manager and Security Hub CSPM icons. The Shield Advanced icon has an arrow pointing down to a rectangle with the title Shield Advanced protected resources. Inside the rectangle are icons for Application Load Balancer, CloudFront distribution, and Elastic IP address. The Firewall Manager icon also has an arrow pointing down to the Shield Advanced protected resources rectangle, and it's labeled Enforces compliance of protected resources. The Shield Advanced icon has a horizontal arrow pointing to the Firewall Manager icon that's labeled DDoS alarm. The Firewall Manager icon has a horizontal arrow pointing to its right, to the Security Hub CSPM icon that's labeled DDoS alarm and compliance findings.](/images/waf/latest/developerguide/images/shield-arch-fms-ash-integration.png)
@@ -21 +21 @@ The following figure depicts a typical architecture for monitoring Shield Advanc
-When you integrate Firewall Manager with Security Hub, you can view security findings in a single place, alongside other alerts and compliance status information for the applications that you run on AWS. 
+When you integrate Firewall Manager with Security Hub CSPM, you can view security findings in a single place, alongside other alerts and compliance status information for the applications that you run on AWS. 
@@ -23 +23 @@ When you integrate Firewall Manager with Security Hub, you can view security fin
-The following screenshot highlights the information that you can see for a Shield Advanced event inside the Security Hub console when you have an integration of this type. 
+The following screenshot highlights the information that you can see for a Shield Advanced event inside the Security Hub CSPM console when you have an integration of this type. 
@@ -25 +25 @@ The following screenshot highlights the information that you can see for a Shiel
-![The screenshot shows the Security Hub console Findings page, subtitled A finding is a security issue or a failed security check.. The section has red outlines highlighting the strings: Title EQUALS Shield Advanced detected attack against monitored resource and Product name EQUAL Firewall Manager. The screen shows a set of details about the specific attack and its status.](/images/waf/latest/developerguide/images/shield-console-security-hub-event.png)
+![The screenshot shows the Security Hub CSPM console Findings page, subtitled A finding is a security issue or a failed security check.. The section has red outlines highlighting the strings: Title EQUALS Shield Advanced detected attack against monitored resource and Product name EQUAL Firewall Manager. The screen shows a set of details about the specific attack and its status.](/images/waf/latest/developerguide/images/shield-console-security-hub-event.png)
@@ -27 +27 @@ The following screenshot highlights the information that you can see for a Shiel
-To learn how to integrate Firewall Manager and Security Hub with Shield Advanced to centralize event and compliance monitoring across your protected accounts, see the AWS security blog [Set up centralized monitoring for DDoS events and auto-remediate noncompliant resources](https://aws.amazon.com/blogs/security/set-up-centralized-monitoring-for-ddos-events-and-auto-remediate-noncompliant-resources/). 
+To learn how to integrate Firewall Manager and Security Hub CSPM with Shield Advanced to centralize event and compliance monitoring across your protected accounts, see the AWS security blog [Set up centralized monitoring for DDoS events and auto-remediate noncompliant resources](https://aws.amazon.com/blogs/security/set-up-centralized-monitoring-for-ddos-events-and-auto-remediate-noncompliant-resources/).