AWS solutions documentation change
Summary
Updated admin account responsibilities to reference DynamoDB-based remediation instead of EventBridge rules.
Security assessment
This change aligns documentation with architectural updates to remediation mechanisms. No security vulnerabilities or weaknesses are referenced in the modification.
Diff
diff --git a/solutions/latest/automated-security-response-on-aws/getting-stated-with-asr.md b/solutions/latest/automated-security-response-on-aws/getting-stated-with-asr.md index 40dd2a21a..f0c15fbd7 100644 --- a//solutions/latest/automated-security-response-on-aws/getting-stated-with-asr.md +++ b//solutions/latest/automated-security-response-on-aws/getting-stated-with-asr.md @@ -24 +24 @@ Account | Purpose | Action in us-east-1 | Action in us-west-2 -The admin account is the account that will perform the administration actions of the solution, namely initiating remediations manually or enabling fully automated remediation with EventBridge rules. This account must also be the Security Hub delegated administrator account for all accounts in which you wish to remediate findings, but it does not need to be nor should it be the AWS Organizations administrator account for the AWS Organization to which your accounts belong. +The admin account is the account that will perform the administration actions of the solution, namely initiating remediations manually or enabling fully automated remediation using the Remediation Configuration DynamoDB table. This account must also be the Security Hub delegated administrator account for all accounts in which you wish to remediate findings, but it does not need to be nor should it be the AWS Organizations administrator account for the AWS Organization to which your accounts belong.