AWS cli documentation change
Summary
Updated documentation to replace 'Security Hub' with 'Security Hub CSPM' in compliance evaluation explanations
Security assessment
The change specifies Security Hub CSPM as the source for compliance evaluations instead of generic Security Hub. This clarifies the security compliance feature but doesn't address any vulnerability or weakness.
Diff
diff --git a/cli/latest/reference/auditmanager/get-evidence-by-evidence-folder.md b/cli/latest/reference/auditmanager/get-evidence-by-evidence-folder.md index 6be3820f6..cb4a1d255 100644 --- a//cli/latest/reference/auditmanager/get-evidence-by-evidence-folder.md +++ b//cli/latest/reference/auditmanager/get-evidence-by-evidence-folder.md @@ -15 +15 @@ - * [AWS CLI 2.34.61 Command Reference](../../index.html) » + * [AWS CLI 2.34.63 Command Reference](../../index.html) » @@ -376,3 +376,3 @@ evidence -> (list) ->>>>> * Audit Manager classes the resource as non-compliant if Security Hub reports a _Fail_ result, or if Config reports a _Non-compliant_ result. ->>>>> * Audit Manager classes the resource as compliant if Security Hub reports a _Pass_ result, or if Config reports a _Compliant_ result. ->>>>> * If a compliance check isn’t available or applicable, then no compliance evaluation can be made for that resource. This is the case if a resource assessment uses Config or Security Hub as the underlying data source type, but those services aren’t enabled. This is also the case if the resource assessment uses an underlying data source type that doesn’t support compliance checks (such as manual evidence, Amazon Web Services API calls, or CloudTrail). +>>>>> * Audit Manager classes the resource as non-compliant if Security Hub CSPM reports a _Fail_ result, or if Config reports a _Non-compliant_ result. +>>>>> * Audit Manager classes the resource as compliant if Security Hub CSPM reports a _Pass_ result, or if Config reports a _Compliant_ result. +>>>>> * If a compliance check isn’t available or applicable, then no compliance evaluation can be made for that resource. This is the case if a resource assessment uses Config or Security Hub CSPM as the underlying data source type, but those services aren’t enabled. This is also the case if the resource assessment uses an underlying data source type that doesn’t support compliance checks (such as manual evidence, Amazon Web Services API calls, or CloudTrail). @@ -428,3 +428,3 @@ evidence -> (list) ->>> * Audit Manager classes evidence as non-compliant if Security Hub reports a _Fail_ result, or if Config reports a _Non-compliant_ result. ->>> * Audit Manager classes evidence as compliant if Security Hub reports a _Pass_ result, or if Config reports a _Compliant_ result. ->>> * If a compliance check isn’t available or applicable, then no compliance evaluation can be made for that evidence. This is the case if the evidence uses Config or Security Hub as the underlying data source type, but those services aren’t enabled. This is also the case if the evidence uses an underlying data source type that doesn’t support compliance checks (such as manual evidence, Amazon Web Services API calls, or CloudTrail). +>>> * Audit Manager classes evidence as non-compliant if Security Hub CSPM reports a _Fail_ result, or if Config reports a _Non-compliant_ result. +>>> * Audit Manager classes evidence as compliant if Security Hub CSPM reports a _Pass_ result, or if Config reports a _Compliant_ result. +>>> * If a compliance check isn’t available or applicable, then no compliance evaluation can be made for that evidence. This is the case if the evidence uses Config or Security Hub CSPM as the underlying data source type, but those services aren’t enabled. This is also the case if the evidence uses an underlying data source type that doesn’t support compliance checks (such as manual evidence, Amazon Web Services API calls, or CloudTrail). @@ -524 +524 @@ nextToken -> (string) - * [AWS CLI 2.34.61 Command Reference](../../index.html) » + * [AWS CLI 2.34.63 Command Reference](../../index.html) »