AWS securityhub documentation change
Summary
Updated descriptions of AWS managed policies (AWSSecurityHubV2ServiceRolePolicy, AWSSecurityHubOrganizationsAccess, AWSSecurityHubFullAccess) to clarify added permissions and capabilities supporting Security Hub features
Security assessment
Changes document updates to IAM policies which govern access control. While security-related, there is no evidence these changes address vulnerabilities - they appear to document expanded feature support rather than fix security issues.
Diff
diff --git a/securityhub/latest/userguide/doc-history.md b/securityhub/latest/userguide/doc-history.md index 15fcb27e5..80bb40e11 100644 --- a//securityhub/latest/userguide/doc-history.md +++ b//securityhub/latest/userguide/doc-history.md @@ -22,3 +22,3 @@ Updated content for Security Hub| Added content for [Trends](https://docs.aws.am -Updated managed policy| Security Hub updated the [AWS managed policies](https://docs.aws.amazon.com/securityhub/latest/userguide/security-iam-awsmanpol.html) named `AWSSecurityHubOrganizationsAccess`. The updated added permissions to describe resource policies to support Security Hub features. These changes support the Security Hub preview release.| November 17, 2025 -Updated managed policy| Security Hub updated the [AWS managed policies](https://docs.aws.amazon.com/securityhub/latest/userguide/security-iam-awsmanpol.html) named `AWSSecurityHubFullAccess`. The update added capabilities around managing GuardDuty, Amazon Inspector, and account management to support Security Hub features. These changes support the Security Hub preview release.| November 17, 2025 -Updated managed policy| Security Hub updated the [AWS managed policy](https://docs.aws.amazon.com/securityhub/latest/userguide/security-iam-awsmanpol.html) named `AWSSecurityHubV2ServiceRolePolicy`. The update added metering capabilities for Amazon Elastic Container Registry, AWS Lambda, Amazon CloudWatch, and AWS Identity and Access Management to support Security Hub (Advanced) features. The update also added support for global AWS Config recorders. These changes support the Security Hub preview release.| November 17, 2025 +Updates to a managed policy – AWSSecurityHubV2ServiceRolePolicy| Security Hub updated the [AWS managed policy](https://docs.aws.amazon.com/securityhub/latest/userguide/security-iam-awsmanpol.html) named `AWSSecurityHubV2ServiceRolePolicy`. The updates added metering capabilities for Amazon Elastic Container Registry, AWS Lambda, Amazon CloudWatch, and AWS Identity and Access Management to support Security Hub features. The updates also added support for global AWS Config recorders. These changes support the Security Hub preview release.| November 17, 2025 +Updates to a managed policy – AWSSecurityHubOrganizationsAccess| Security Hub updated the [AWS managed policy](https://docs.aws.amazon.com/securityhub/latest/userguide/security-iam-awsmanpol.html) named `AWSSecurityHubOrganizationsAccess`. The updates added permissions to describe resource policies that support Security Hub features. These changes support the Security Hub preview release.| November 17, 2025 +Updates to a managed policy – AWSSecurityHubFullAccess| Security Hub updated the [AWS managed policy](https://docs.aws.amazon.com/securityhub/latest/userguide/security-iam-awsmanpol.html) named `AWSSecurityHubFullAccess`. The updates added capabilities around managing GuardDuty, Amazon Inspector, and account management to support Security Hub features. These changes support the Security Hub preview release.| November 17, 2025