AWS wellarchitected documentation change
Summary
Updated reference from 'AWS Security Hub' to 'AWS Security Hub CSPM' in the VSOC capabilities section
Security assessment
Change only specifies the CSPM capability of Security Hub without addressing any vulnerability or incident. No security impact as it's a clarification of existing functionality.
Diff
diff --git a/wellarchitected/latest/connected-mobility-lens/incident-response.md b/wellarchitected/latest/connected-mobility-lens/incident-response.md index ca0405aeb..fdd4df645 100644 --- a//wellarchitected/latest/connected-mobility-lens/incident-response.md +++ b//wellarchitected/latest/connected-mobility-lens/incident-response.md @@ -16 +16 @@ To successfully respond to an incident, you must first define VSOC capabilities -The VSOC should include security orchestration automation and response (SOAR) and ticketing capability to provide timely responses and workflows that can prioritize and address incidents. Customers can send findings to AWS Security Hub, which integrates with issue tracking systems like [ServiceNow](https://docs.aws.amazon.com/smc/latest/ag/sn-config-security-hub.html) and [Jira](https://docs.aws.amazon.com/smc/latest/ag/jsmcloud-config-security-hub.html). The incident response procedure must be consistent, accurate, and updated when necessary. Running game days and tabletop exercises can provide insight about the ability to handle an incident in a practice environment. Game days, also known as simulations or exercises, are internal events that provide a structured opportunity to practice your incident management plans and procedures during a realistic scenario. +The VSOC should include security orchestration automation and response (SOAR) and ticketing capability to provide timely responses and workflows that can prioritize and address incidents. Customers can send findings to AWS Security Hub CSPM, which integrates with issue tracking systems like [ServiceNow](https://docs.aws.amazon.com/smc/latest/ag/sn-config-security-hub.html) and [Jira](https://docs.aws.amazon.com/smc/latest/ag/jsmcloud-config-security-hub.html). The incident response procedure must be consistent, accurate, and updated when necessary. Running game days and tabletop exercises can provide insight about the ability to handle an incident in a practice environment. Game days, also known as simulations or exercises, are internal events that provide a structured opportunity to practice your incident management plans and procedures during a realistic scenario.