AWS wellarchitected documentation change
Summary
Updated two references from 'AWS Security Hub' to 'AWS Security Hub CSPM' in operational readiness context
Security assessment
Clarifies the CSPM component in operational checklists but doesn't address security vulnerabilities or add security documentation.
Diff
diff --git a/wellarchitected/2025-02-25/framework/ops_ready_to_support_const_orr.md b/wellarchitected/2025-02-25/framework/ops_ready_to_support_const_orr.md index 9f6d10c64..95e9363ee 100644 --- a//wellarchitected/2025-02-25/framework/ops_ready_to_support_const_orr.md +++ b//wellarchitected/2025-02-25/framework/ops_ready_to_support_const_orr.md @@ -49 +49 @@ Run ORRs before a workload launches to general availability and then throughout -An ORR is two things: a process and a checklist. Your ORR process should be adopted by your organization and supported by an executive sponsor. At a minimum, ORRs must be conducted before a workload launches to general availability. Run the ORR throughout the software development lifecycle to keep it up to date with best practices or new requirements. The ORR checklist should include configuration items, security and governance requirements, and best practices from your organization. Over time, you can use services, such as [AWS Config](https://docs.aws.amazon.com/config/latest/developerguide/WhatIsConfig.html), [AWS Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html), and [AWS Control Tower Guardrails](https://docs.aws.amazon.com/controltower/latest/userguide/guardrails.html), to build best practices from the ORR into guardrails for automatic detection of best practices. +An ORR is two things: a process and a checklist. Your ORR process should be adopted by your organization and supported by an executive sponsor. At a minimum, ORRs must be conducted before a workload launches to general availability. Run the ORR throughout the software development lifecycle to keep it up to date with best practices or new requirements. The ORR checklist should include configuration items, security and governance requirements, and best practices from your organization. Over time, you can use services, such as [AWS Config](https://docs.aws.amazon.com/config/latest/developerguide/WhatIsConfig.html), [AWS Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html), and [AWS Control Tower Guardrails](https://docs.aws.amazon.com/controltower/latest/userguide/guardrails.html), to build best practices from the ORR into guardrails for automatic detection of best practices. @@ -138 +138 @@ Support customers with Enterprise Support can request the [Operational Readiness - * [AWS Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html) + * [AWS Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html)