AWS Security ChangesHomeSearch

AWS config documentation change

Service: config · 2025-03-10 · Documentation low

File: config/latest/developerguide/managed-rules-by-trigger-type.md

Summary

Added new security-related managed rules including 'guardduty-runtime-monitoring-enabled' and 'netfw-subnet-change-protection-enabled' across trigger types

Security assessment

Documents new security monitoring and protection rules without referencing specific vulnerabilities

Diff

diff --git a/config/latest/developerguide/managed-rules-by-trigger-type.md
index 920e51cc2..cd60f14a6 100644
--- a/config/latest/developerguide/managed-rules-by-trigger-type.md
+++ b/config/latest/developerguide/managed-rules-by-trigger-type.md
@@ -260,0 +261,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [connect-instance-logging-enabled](./connect-instance-logging-enabled.html)
+
@@ -376,0 +379,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [ecr-repository-cmk-encryption-enabled](./ecr-repository-cmk-encryption-enabled.html)
+
@@ -434,0 +439,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [elbv2-predefined-security-policy-ssl-check](./elbv2-predefined-security-policy-ssl-check.html)
+
@@ -494,0 +501,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [glue-spark-job-supported-version](./glue-spark-job-supported-version.html)
+
@@ -622,0 +631,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [netfw-subnet-change-protection-enabled](./netfw-subnet-change-protection-enabled.html)
+
@@ -786,0 +797,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [sqs-queue-no-public-access](./sqs-queue-no-public-access.html)
+
@@ -800,0 +813,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [transfer-connector-logging-enabled](./transfer-connector-logging-enabled.html)
+
@@ -1013,0 +1028,4 @@ _Periodic rules_ are rules that AWS Config evaluates periodicially at a frequenc
+  * [guardduty-ec2-protection-runtime-enabled](./guardduty-ec2-protection-runtime-enabled.html)
+
+  * [guardduty-ecs-protection-runtime-enabled](./guardduty-ecs-protection-runtime-enabled.html)
+
@@ -1027,0 +1046,2 @@ _Periodic rules_ are rules that AWS Config evaluates periodicially at a frequenc
+  * [guardduty-runtime-monitoring-enabled](./guardduty-runtime-monitoring-enabled.html)
+