AWS securityhub documentation change

Service: securityhub · 2026-06-28 · Documentation low

File: securityhub/latest/userguide/security-iam-awsmanpol.md

Summary

Updated AWSSecurityHubServiceRolePolicy permissions to include third-party configuration recorder management and Connector health metrics retrieval. Added policy change history entry.

Security assessment

Expands documentation of managed policy permissions for third-party integrations without referencing a security fix. The changes solely provide updated security feature documentation for integration capabilities.

Diff

diff --git a/securityhub/latest/userguide/security-iam-awsmanpol.md b/securityhub/latest/userguide/security-iam-awsmanpol.md
index f45c1b91c..6a45272de 100644
--- a//securityhub/latest/userguide/security-iam-awsmanpol.md
+++ b//securityhub/latest/userguide/security-iam-awsmanpol.md
@@ -152 +152 @@ This policy includes the following permissions:
-  * `cloudwatch` – Retrieve current CloudWatch alarms.
+  * `cloudwatch` – Retrieve current CloudWatch alarms and Connector health metrics.
@@ -158 +158 @@ This policy includes the following permissions:
-  * `config` – Retrieve information about configuration recorders, resources, and AWS Config rules. Also allows the service-linked role to manage the Security Hub CSPM service-linked configuration recorders, create and delete AWS Config rules, and run evaluations against the rules.
+  * `config` – Retrieve information about configuration recorders, resources, and AWS Config rules. Manage the Security Hub CSPM service-linked configuration recorders and third-party service-linked configuration recorders. Create and delete AWS Config rules, and run evaluations against the rules. List configuration recorders and get connector information to support third-party cloud integrations.
@@ -178,0 +179 @@ Change | Description | Date
+AWSSecurityHubServiceRolePolicy – Updated policy  |  Security Hub CSPM updated the policy to support third-party integration. The update adds the following permissions: manage third-party configuration recorders, list configuration recorders, get connector information, and retrieve Connector health metrics. | June 30, 2026