AWS wellarchitected documentation change
Summary
Updated AWS Security Hub reference to 'AWS Security Hub CSPM' in cross-account resource detection context
Security assessment
Change clarifies the specific Security Hub capability (CSPM) used for detecting publicly exposed resources. While it improves documentation accuracy, there's no evidence of addressing a specific vulnerability. The update enhances security posture documentation by specifying the CSPM feature.
Diff
diff --git a/wellarchitected/latest/framework/sec_permissions_analyze_cross_account.md b/wellarchitected/latest/framework/sec_permissions_analyze_cross_account.md index 30030a703..22f46d089 100644 --- a//wellarchitected/latest/framework/sec_permissions_analyze_cross_account.md +++ b//wellarchitected/latest/framework/sec_permissions_analyze_cross_account.md @@ -30 +30 @@ If your account is in AWS Organizations, you can grant access to resources to th -[AWS Config can report resources](https://docs.aws.amazon.com/config/latest/developerguide/operational-best-practices-for-Publicly-Accessible-Resources.html) that are misconfigured, and through AWS Config policy checks, can detect resources that have public access configured. Services such as [AWS Control Tower](https://aws.amazon.com/controltower/) and [AWS Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html) simplify deploying detective controls and guardrails across AWS Organizations to identify and remediate publicly exposed resources. For example, AWS Control Tower has a managed guardrail which can detect if any [Amazon EBS snapshots are restorable by AWS accounts](https://docs.aws.amazon.com/controltower/latest/userguide/what-is-control-tower.html). +[AWS Config can report resources](https://docs.aws.amazon.com/config/latest/developerguide/operational-best-practices-for-Publicly-Accessible-Resources.html) that are misconfigured, and through AWS Config policy checks, can detect resources that have public access configured. Services such as [AWS Control Tower](https://aws.amazon.com/controltower/) and [AWS Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html) simplify deploying detective controls and guardrails across AWS Organizations to identify and remediate publicly exposed resources. For example, AWS Control Tower has a managed guardrail which can detect if any [Amazon EBS snapshots are restorable by AWS accounts](https://docs.aws.amazon.com/controltower/latest/userguide/what-is-control-tower.html).