AWS securityhub documentation change
Summary
Added entry for April 29, 2026 update to AWSSecurityHubServiceRolePolicy managed policy, adding permissions for managing Security Hub CSPM service-linked configuration recorders and creating AWS Config service-linked role.
Security assessment
This change documents an update to an AWS managed policy (AWSSecurityHubServiceRolePolicy) that grants additional permissions. While it involves security-related permissions (managing configuration recorders and service-linked roles), there is no evidence in the diff that this change addresses a specific security vulnerability or incident. It appears to be a routine policy update to support new CSPM functionality.
Diff
diff --git a/securityhub/latest/userguide/doc-history.md b/securityhub/latest/userguide/doc-history.md index a9af3fb14..73ceda5d5 100644 --- a//securityhub/latest/userguide/doc-history.md +++ b//securityhub/latest/userguide/doc-history.md @@ -14,0 +15 @@ Change| Description| Date +Updates to a managed policy – AWSSecurityHubServiceRolePolicy| Security Hub CSPM updated the [AWS managed policy](https://docs.aws.amazon.com/securityhub/latest/userguide/security-iam-awsmanpol.html) named `AWSSecurityHubServiceRolePolicy`. The updates added permissions to manage Security Hub CSPM service-linked configuration recorders and create the AWS Config service-linked role.| April 29, 2026