AWS solutions documentation change
Summary
Replaced EventBridge rules references with DynamoDB-based remediation configuration and updated remediation initiation mechanisms.
Security assessment
The changes document an architectural shift from EventBridge rules to DynamoDB for remediation configuration. This appears to be a feature enhancement rather than a security fix, with no vulnerability mentioned in the diff.
Diff
diff --git a/solutions/latest/automated-security-response-on-aws/enabling-and-diabling-parts-of-solution.md b/solutions/latest/automated-security-response-on-aws/enabling-and-diabling-parts-of-solution.md index 593e5238c..53c0311f7 100644 --- a//solutions/latest/automated-security-response-on-aws/enabling-and-diabling-parts-of-solution.md +++ b//solutions/latest/automated-security-response-on-aws/enabling-and-diabling-parts-of-solution.md @@ -11 +11 @@ As a solution administrator, you have the following controls over which function - * The admin stack will only be able to initiate remediations (through custom action or fully automated EventBridge rules) in accounts in which the member and member roles stacks have been deployed with the admin account number given as a parameter value. + * The admin stack will only be able to initiate remediations (through custom action or fully automated) in accounts in which the member and member roles stacks have been deployed with the admin account number given as a parameter value. @@ -20 +20 @@ As a solution administrator, you have the following controls over which function - * The admin stack will only be able to initiate remediations (through custom action or fully automated EventBridge rules) for findings which arrive in the admin account and Region. + * The admin stack will only be able to initiate remediations (through custom action or fully automated) for findings which arrive in the admin account and Region. @@ -29 +29 @@ As a solution administrator, you have the following controls over which function - * The admin stack will only be able to initiate remediations (through custom action or fully automated EventBridge rules) for controls which have a control runbook deployed in the target member account and Region. These are deployed by the member stack for each standard. + * The admin stack will only be able to initiate remediations (through custom action or fully automated) for controls which have a control runbook deployed in the target member account and Region. These are deployed by the member stack for each standard. @@ -31 +31 @@ As a solution administrator, you have the following controls over which function - * The admin stack will only be able to initiate fully automated remediations using EventBridge rules for controls which have the rules deployed by the admin stack for that standard. These are deployed to the admin account. + * The admin stack will only be able to initiate fully automated remediations for controls that are enabled in the Remediation Configuratio DynamoDB table. This table is deployed to the admin account. @@ -40 +40 @@ As a solution administrator, you have the following controls over which function - * The admin stack will only be able to initiate remediations (through custom action or fully automated EventBridge rules) for controls which have a control runbook deployed in the target member account and Region by the member stack for each standard. + * The admin stack will only be able to initiate remediations (through custom action or fully automated) for controls which have a control runbook deployed in the target member account and Region by the member stack for each standard. @@ -49 +49 @@ As a solution administrator, you have the following controls over which function - * The admin stack will only be able to initiate remediations (through custom action or fully automated EventBridge rules) for standards that are enabled through the SSM Parameter deployed by the standard admin stack. + * The admin stack will only be able to initiate remediations (through custom action or fully automated) for standards that are enabled through the SSM Parameter deployed by the standard admin stack.