AWS AWSCloudFormation documentation change
Summary
Updated operator compatibility documentation for V2 automation rules.
Security assessment
Refines documentation for security filtering operators without addressing vulnerabilities. Enhances clarity of existing security features.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-securityhub-automationrulev2-stringfilter.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-securityhub-automationrulev2-stringfilter.md index 81f842f82..29147c881 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-securityhub-automationrulev2-stringfilter.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-securityhub-automationrulev2-stringfilter.md @@ -83 +83 @@ For example, for the following filters, Security Hub CSPM first identifies findi -`CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2`, `GetFindingStatisticsV2`, `GetResourcesV2`, and `GetResourcesStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the _AWS Security Hub CSPM User Guide_. +The `CONTAINS` operator works with automation rules V1 and V2. The `NOT_CONTAINS` operator works only with automation rules V1. The `CONTAINS_WORD` operator works only in the `GetFindingsV2`, `GetFindingStatisticsV2`, `GetResourcesV2`, and `GetResourcesStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the _AWS Security Hub CSPM User Guide_.