AWS wellarchitected documentation change
Summary
Updated documentation to replace references to 'AWS Security Hub' with 'AWS Security Hub CSPM' throughout the text, including standards and integration points.
Security assessment
The change clarifies the use of CSPM (Cloud Security Posture Management) features but doesn't address a specific vulnerability or incident. It enhances documentation of security posture management capabilities without evidence of fixing a security issue.
Diff
diff --git a/wellarchitected/latest/management-and-governance-guide/controls.md b/wellarchitected/latest/management-and-governance-guide/controls.md index ddf2bcb86..027b563e7 100644 --- a//wellarchitected/latest/management-and-governance-guide/controls.md +++ b//wellarchitected/latest/management-and-governance-guide/controls.md @@ -27 +27 @@ BPX Energy, a BP company, used AWS Control Tower to establish their AWS environm -Both AWS Control Tower and AWS Security Hub continually evaluate all of your AWS accounts and workloads and provide dashboards so you can quickly identify areas of deviation from established guardrails. These insights can be used to improve and maintain your security posture across your AWS environments. For instance, AWS Control Tower applies a mandatory set of guardrails during the provisioning and management of your landing zone that indicate how your landing zone is compliant with best practices. AWS Security Hub provides a mechanism to deploy and categorize security-focused detective guardrails. This mechanism allows you to aggregate, organize, prioritize, and automate the remediation of the findings across your multi-account environment. There is an inclusive set of Security Hub standards that can be used to align to your specific compliance and security framework. These include [AWS Foundational Security Best Practices](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp.html), the [CIS AWS Foundations Benchmark](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-cis.html), and the [Payment Card Industry Data Security Standard (PCI DSS)](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-pcidss.html). You can investigate findings via the AWS Security Hub integration with Amazon Detective, and you can build automated or semiautomated remediation actions using the Amazon EventBridge integration. +Both AWS Control Tower and AWS Security Hub CSPM continually evaluate all of your AWS accounts and workloads and provide dashboards so you can quickly identify areas of deviation from established guardrails. These insights can be used to improve and maintain your security posture across your AWS environments. For instance, AWS Control Tower applies a mandatory set of guardrails during the provisioning and management of your landing zone that indicate how your landing zone is compliant with best practices. AWS Security Hub CSPM provides a mechanism to deploy and categorize security-focused detective guardrails. This mechanism allows you to aggregate, organize, prioritize, and automate the remediation of the findings across your multi-account environment. There is an inclusive set of Security Hub CSPM standards that can be used to align to your specific compliance and security framework. These include [AWS Foundational Security Best Practices](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp.html), the [CIS AWS Foundations Benchmark](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-cis.html), and the [Payment Card Industry Data Security Standard (PCI DSS)](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-pcidss.html). You can investigate findings via the AWS Security Hub CSPM integration with Amazon Detective, and you can build automated or semiautomated remediation actions using the Amazon EventBridge integration.