AWS Security ChangesHomeSearch

AWS wellarchitected documentation change

Service: wellarchitected · 2025-12-10 · Documentation low

File: wellarchitected/2025-02-25/framework/sec_protect_data_rest_key_mgmt.md

Summary

Changed Security Hub to Security Hub CSPM for key management monitoring

Security assessment

Service name update without functional changes to key management security practices. Monitoring capabilities for key misconfigurations remain equivalent.

Diff

diff --git a/wellarchitected/2025-02-25/framework/sec_protect_data_rest_key_mgmt.md b/wellarchitected/2025-02-25/framework/sec_protect_data_rest_key_mgmt.md
index 252e1b34a..4dfd18ee0 100644
--- a//wellarchitected/2025-02-25/framework/sec_protect_data_rest_key_mgmt.md
+++ b//wellarchitected/2025-02-25/framework/sec_protect_data_rest_key_mgmt.md
@@ -70 +70 @@ Most AWS services use AWS KMS in a way that is transparent to you \- your only r
-  6. Enable [Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/kms-controls.html) to receive notifications if there are misconfigured key policies, keys scheduled for deletion, or keys without automated rotation enabled. 
+  6. Enable [Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/kms-controls.html) to receive notifications if there are misconfigured key policies, keys scheduled for deletion, or keys without automated rotation enabled.