AWS securityhub documentation change
Summary
Updated cost estimator documentation with new sections on account-specific behavior and pricing region, revised data source labels, removed 'show current cost' toggle, and improved troubleshooting guidance.
Security assessment
Changes focus on cost estimation transparency (pricing region details) and account-specific UX improvements. No security vulnerabilities or security features are addressed. Modifications clarify operational behavior without security implications.
Diff
diff --git a/securityhub/latest/userguide/using-cost-estimator.md b/securityhub/latest/userguide/using-cost-estimator.md index 796a81a1f..b0109ac89 100644 --- a//securityhub/latest/userguide/using-cost-estimator.md +++ b//securityhub/latest/userguide/using-cost-estimator.md @@ -5 +5 @@ -Accessing the cost estimatorUnderstanding the cost estimator interfaceViewing cost estimatesShow current cost onlyEditing usage valuesResetting the estimatorExporting estimatesTroubleshooting +Accessing the cost estimatorUnderstanding the cost estimator interfaceViewing cost estimatesAccount-specific behaviorEditing usage valuesResetting the estimatorExporting estimatesTroubleshooting @@ -57 +57 @@ The Cost Estimator page contains three main sections: -The table displays costs in two columns: +The table header includes view/edit mode controls and a reset option. The table displays costs in two columns: @@ -59 +59 @@ The table displays costs in two columns: - * **Individual services** – Current or estimated costs for separate security services + * **Individual services** – Current or estimated costs for separate security services. @@ -61 +61 @@ The table displays costs in two columns: - * **Security Hub** – Estimated costs using simplified pricing model + * **Security Hub** – Estimated costs using simplified pricing model. @@ -65,0 +66,4 @@ The table displays costs in two columns: +### Pricing region + +The first column displays pricing context information, including a note that estimates use us-east-1 pricing for calculations. A badge indicates that enterprise discounts are not included in the estimates. + @@ -68 +72 @@ The table displays costs in two columns: -When using the cost estimator you can view, edit, reset, and export estimates +When using the cost estimator you can view, edit, reset, and export estimates. @@ -89,8 +93 @@ The estimator displays data from multiple sources, indicated by labels: - * **Default** – Data from AWS Cost Explorer (past 30 days) - - * **Contains sample usage** – AWS-provided sample scenarios - - * **Custom usage** – User-entered values - - * **Not enabled** – Capability not currently active - + * **Default** – Data from AWS Cost Explorer (past 30 days). @@ -97,0 +95 @@ The estimator displays data from multiple sources, indicated by labels: + * **$-/mo** – Cost data unavailable (shown when Cost Explorer access is not available). @@ -98,0 +97 @@ The estimator displays data from multiple sources, indicated by labels: + * **Custom usage** – User-entered values. @@ -100 +99 @@ The estimator displays data from multiple sources, indicated by labels: -## Show current cost only + * **Not enabled** – Shows when Cost Explorer permissions do not exist. @@ -102 +100,0 @@ The estimator displays data from multiple sources, indicated by labels: -When Cost Explorer data is available, you can toggle between estimated and current costs. @@ -104 +101,0 @@ When Cost Explorer data is available, you can toggle between estimated and curre -###### To show current costs only @@ -106 +102,0 @@ When Cost Explorer data is available, you can toggle between estimated and curre - 1. In view mode, locate the **Show current cost only** toggle below the summary. @@ -108 +104 @@ When Cost Explorer data is available, you can toggle between estimated and curre - 2. Turn on the toggle. +## Account-specific behavior @@ -109,0 +106 @@ When Cost Explorer data is available, you can toggle between estimated and curre +When delegated administrator or member accounts access the cost estimator they will see an alert of **Organization usage data is not available for this account**. The cost estimator will open in edit mode by default in this scenario. @@ -111,7 +108 @@ When Cost Explorer data is available, you can toggle between estimated and curre - - -Only actual costs from Cost Explorer are displayed, without sample or estimated costs. Capabilities not currently enabled show "Not enabled" status. - -###### Note - -The toggle is not available in edit mode or when Cost Explorer data is unavailable. +When magament accounts or stand alone accounts access the cost estimator and see alerts related to Cost Explorer the cost estimator will open in edit mode by default. @@ -173 +164 @@ While in the cost estimator the data for your estimate can be exported to a PDF -The PDF downloads automatically with filename: `SecurityHub-Cost-Estimate-YYYY-MM-DD.pdf` +The PDF downloads automatically with filename: `SecurityHub-Cost-Estimate-YYYY-MM-DD.pdf`. @@ -183 +174 @@ This section covers common issues and solutions that can occur when using the co -Alert displays "No cost data available for your account" +Alert displays "No cost data available for your account". @@ -198 +189 @@ Standalone Account | Enable Cost Explorer and wait 24 hours for data processing -Use sample data or enter custom values in edit mode. +Enter custom values in edit mode. @@ -204 +195 @@ Use sample data or enter custom values in edit mode. -"Access denied" error for specific API operations +"Access denied" error for specific API operations. @@ -227 +218 @@ You can still use edit mode to enter manual values when permissions are missing, -Capability displays "Not enabled" status +Capability displays "Not enabled" status. @@ -231 +222 @@ Capability displays "Not enabled" status -The capability has no usage data in Cost Explorer for the past 30 days. +This status appears when you have Cost Explorer access but the capability is not currently active. If you see $-/mo instead, this indicates that Cost Explorer data is not available for your account type. @@ -248 +239 @@ The capability has no usage data in Cost Explorer for the past 30 days. -Capability displays "Not applicable" in Individual services column +Capability displays "Not applicable" in Individual services column. @@ -258 +249 @@ This capability is only available through Security Hub simplified pricing, not a -Edited costs differ from original Cost Explorer values +Edited costs differ from original Cost Explorer values.