AWS prescriptive-guidance documentation change
Summary
Updated internal links, clarified control customization wording, added CloudFormation integration link, updated Security Hub branding, and renumbered section headings
Security assessment
Changes focus on documentation structure and resource linking. The CloudFormation integration reference provides implementation guidance but does not introduce new security features. Security Hub terminology update reflects branding consistency rather than security fixes.
Diff
diff --git a/prescriptive-guidance/latest/security-best-practices/audit.md b/prescriptive-guidance/latest/security-best-practices/audit.md index 3ba40e838..dd7688e73 100644 --- a//prescriptive-guidance/latest/security-best-practices/audit.md +++ b//prescriptive-guidance/latest/security-best-practices/audit.md @@ -5 +5 @@ -[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Top 10 security best practices for securing backups in AWS](welcome.html) +[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Top 10 security best practices for securing backups in AWS](introduction.html) @@ -11 +11 @@ To ensure that the backup program is performing as it should and to identify and -[AWS Backup Audit Manager](https://docs.aws.amazon.com/aws-backup/latest/devguide/aws-backup-audit-manager.html) provides built-in, customizable compliance controls that align with your business compliance and regulatory requirements. You can use [prebuilt and customizable controls](https://docs.aws.amazon.com/aws-backup/latest/devguide/choosing-controls.html) as audit frameworks to evaluate your AWS Backup practices. The controls include: +[AWS Backup Audit Manager](https://docs.aws.amazon.com/aws-backup/latest/devguide/aws-backup-audit-manager.html) provides built-in, customizable compliance controls that align with your business compliance and regulatory requirements. You can use [prebuilt and customizable](https://docs.aws.amazon.com/aws-backup/latest/devguide/choosing-controls.html) controls as audit frameworks to evaluate your AWS Backup practices. The controls include: @@ -32 +32 @@ To ensure that the backup program is performing as it should and to identify and -For infrastructure as-code (IaC) automation, you can use AWS Backup Audit Manager with AWS CloudFormation. +For infrastructure as-code (IaC) automation, you can use [AWS Backup Audit Manager with AWS CloudFormation](https://docs.aws.amazon.com/aws-backup/latest/devguide/bam-cfn-integration.html). @@ -34 +34 @@ For infrastructure as-code (IaC) automation, you can use AWS Backup Audit Manage -[AWS Security Hub CSPM](https://aws.amazon.com/security-hub/) provides you with a comprehensive view of your security state in AWS. It also helps you check your environment against security best practices and industry standards such as [AWS Foundational Security Best Practices controls](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp-controls.html). If you use Security Hub CSPM within your cloud environment, we recommend you enable the AWS Foundational Security Best Practices standard, because it includes detective controls that can help with securing backups in AWS. Most of the detective controls in AWS Backup Audit Manager and Security Hub CSPM are also available as [AWS Config managed rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html). +[AWS Security Hub](https://aws.amazon.com/security-hub/) provides you with a comprehensive view of your security state in AWS. It also helps you check your environment against security best practices and industry standards such as [AWS Foundational Security Best Practices controls](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp-controls.html). If you use Security Hub within your cloud environment, we recommend you enable the AWS Foundational Security Best Practices standard, because it includes detective controls that can help with securing backups in AWS. Most of the detective controls in AWS Backup Audit Manager and Security Hub are also available as [AWS Config managed rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html). @@ -42 +42 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Monitoring and alerting +Step 7. Implement backup monitoring and alerting @@ -44 +44 @@ Monitoring and alerting -Test data recovery +Step 9. Test data recovery capabilities