AWS security-ir documentation change
Summary
Updated terminology from 'security alerts' to 'security threat alerts' and fixed typos in 'Security Incident Response' service name.
Security assessment
Terminology refinement (alert → threat alert) improves precision but doesn't indicate security vulnerability remediation. Typo fixes don't relate to security issues.
Diff
diff --git a/security-ir/latest/userguide/monitoring-and-investigation.md b/security-ir/latest/userguide/monitoring-and-investigation.md index 603aa3844..951f9c622 100644 --- a//security-ir/latest/userguide/monitoring-and-investigation.md +++ b//security-ir/latest/userguide/monitoring-and-investigation.md @@ -7 +7 @@ -AWS Security Incident Response reviews and triages security alerts from Amazon GuardDuty and AWS Security Hub CSPM, then configures suppression rules based on your environment to prevent unnecessary alerts. Security Indcident Response engineers investigate findings and quickly escalates and guides your team to rapidly contain potential issues. If desired, you can grant AWS Security Incident Response permission to implement containment actions on your behalf. +AWS Security Incident Response reviews and triages security threat alerts from Amazon GuardDuty and AWS Security Hub CSPM, then configures suppression rules based on your environment to prevent unnecessary alerts. Security Incident Response engineers investigate findings and quickly escalates and guides your team to rapidly contain potential issues. If desired, you can grant AWS Security Incident Response permission to implement containment actions on your behalf. @@ -11 +11 @@ AWS Security Incident Response aligns to the NIST 800-61r2 [_Computer Security e -When the AWS Security Incident Response service identifies a security alert or you request security assistance, Security Indcident Response engineers investigate. The team collects log events and service data such as GuardDuty alerts, triages and analyzes that data, performs remediation and containment activities, and provides post-incident reporting. +When the AWS Security Incident Response service identifies a security alert or you request security assistance, Security Incident Response engineers investigate. The team collects log events and service data such as GuardDuty alerts, triages and analyzes that data, performs remediation and containment activities, and provides post-incident reporting.