AWS securityhub documentation change
Summary
Added new control references for ECR encryption, ELB security policies, Glue Spark jobs, Network Firewall subnet protection, RDS SQL Server logging, and Transfer Family logging
Security assessment
The changes add references to various security controls but do not indicate they are addressing specific security vulnerabilities or incidents. These are routine updates to security documentation.
Diff
diff --git a/securityhub/latest/userguide/nist-standard.md index de38c25d9..eeaf37175 100644 --- a/securityhub/latest/userguide/nist-standard.md +++ b/securityhub/latest/userguide/nist-standard.md @@ -202,0 +203,2 @@ For more information about NIST SP 800-53 Rev. 5, see the [NIST Computer Securit +[[ECR.5] ECR repositories should be encrypted with customer managed AWS KMS keys](./ecr-controls.html#ecr-5) + @@ -284,0 +287,2 @@ For more information about NIST SP 800-53 Rev. 5, see the [NIST Computer Securit +[[ELB.17] Application and Network Load Balancers with listeners should use recommended security policies](./elb-controls.html#elb-17) + @@ -316,0 +321,2 @@ For more information about NIST SP 800-53 Rev. 5, see the [NIST Computer Securit +[[Glue.4] AWS Glue Spark jobs should run on supported versions of AWS Glue](./glue-controls.html#glue-4) + @@ -406,0 +413,2 @@ For more information about NIST SP 800-53 Rev. 5, see the [NIST Computer Securit +[[NetworkFirewall.10] Network Firewall firewalls should have subnet change protection enabled](./networkfirewall-controls.html#networkfirewall-10) + @@ -486,0 +495,2 @@ For more information about NIST SP 800-53 Rev. 5, see the [NIST Computer Securit +[[RDS.40] RDS for SQL Server DB instances should publish logs to CloudWatch Logs](./rds-controls.html#rds-40) + @@ -572,0 +583,2 @@ For more information about NIST SP 800-53 Rev. 5, see the [NIST Computer Securit +[[Transfer.3] Transfer Family connectors should have logging enabled](./transfer-controls.html#transfer-3) +