AWS Security ChangesHomeSearch

AWS config documentation change

Service: config · 2025-03-19 · Documentation low

File: config/latest/developerguide/managing-rules-by-region-availability.md

Summary

Removed multiple AWS Config managed rule references from regional availability documentation

Security assessment

The changes remove references to various managed rules (including security-related ones like encryption-in-transit checks and audit logging), but there's no evidence this is addressing a specific security vulnerability. This appears to be routine documentation maintenance, likely removing deprecated or regionally unavailable rules.

Diff

diff --git a/config/latest/developerguide/managing-rules-by-region-availability.md b/config/latest/developerguide/managing-rules-by-region-availability.md
index c6a35b826..0cf8810ed 100644
--- a/config/latest/developerguide/managing-rules-by-region-availability.md
+++ b/config/latest/developerguide/managing-rules-by-region-availability.md
@@ -123,2 +122,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [apprunner-vpc-connector-multi-az](./apprunner-vpc-connector-multi-az.html)
-
@@ -129,2 +126,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [appstream-fleet-multi-az](./appstream-fleet-multi-az.html)
-
@@ -159,2 +154,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [aurora-mysql-cluster-audit-logging](./aurora-mysql-cluster-audit-logging.html)
-
@@ -333,2 +326,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [docdb-cluster-encrypted-in-transit](./docdb-cluster-encrypted-in-transit.html)
-
@@ -627,2 +618,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fsx-ontap-deployment-type-check](./fsx-ontap-deployment-type-check.html)
-
@@ -631,2 +620,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fsx-openzfs-deployment-type-check](./fsx-openzfs-deployment-type-check.html)
-
@@ -759,2 +746,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mariadb-publish-logs-to-cloudwatch-logs](./mariadb-publish-logs-to-cloudwatch-logs.html)
-
@@ -763,2 +748,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-active-broker-ldap-authentication](./mq-active-broker-ldap-authentication.html)
-
@@ -767,2 +750,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-active-single-instance-broker-storage-type-efs](./mq-active-single-instance-broker-storage-type-efs.html)
-
@@ -773,2 +754,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-broker-general-logging-enabled](./mq-broker-general-logging-enabled.html)
-
@@ -885,2 +864,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [rds-mariadb-instance-encrypted-in-transit](./rds-mariadb-instance-encrypted-in-transit.html)
-
@@ -903,2 +880,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [rds-sqlserver-encrypted-in-transit](./rds-sqlserver-encrypted-in-transit.html)
-
@@ -931,2 +906,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [redshift-serverless-workgroup-routes-within-vpc](./redshift-serverless-workgroup-routes-within-vpc.html)
-
@@ -1015,2 +988,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [sagemaker-notebook-instance-platform-version](./sagemaker-notebook-instance-platform-version.html)
-
@@ -1236,2 +1207,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [apprunner-vpc-connector-multi-az](./apprunner-vpc-connector-multi-az.html)
-
@@ -1242,2 +1211,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [appstream-fleet-multi-az](./appstream-fleet-multi-az.html)
-
@@ -1276,2 +1243,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [aurora-mysql-cluster-audit-logging](./aurora-mysql-cluster-audit-logging.html)
-
@@ -1482,2 +1447,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [docdb-cluster-encrypted-in-transit](./docdb-cluster-encrypted-in-transit.html)
-
@@ -1778,2 +1741,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fsx-ontap-deployment-type-check](./fsx-ontap-deployment-type-check.html)
-
@@ -1782,2 +1743,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fsx-openzfs-deployment-type-check](./fsx-openzfs-deployment-type-check.html)
-
@@ -1882,2 +1841,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [iottwinmaker-component-type-tagged](./iottwinmaker-component-type-tagged.html)
-
@@ -1936,2 +1893,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mariadb-publish-logs-to-cloudwatch-logs](./mariadb-publish-logs-to-cloudwatch-logs.html)
-
@@ -1940,2 +1895,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-active-broker-ldap-authentication](./mq-active-broker-ldap-authentication.html)
-
@@ -1944,2 +1897,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-active-single-instance-broker-storage-type-efs](./mq-active-single-instance-broker-storage-type-efs.html)
-
@@ -1950,2 +1901,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-broker-general-logging-enabled](./mq-broker-general-logging-enabled.html)
-
@@ -2064,2 +2013,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [rds-mariadb-instance-encrypted-in-transit](./rds-mariadb-instance-encrypted-in-transit.html)
-
@@ -2082,2 +2029,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [rds-sqlserver-encrypted-in-transit](./rds-sqlserver-encrypted-in-transit.html)
-
@@ -2110,2 +2055,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [redshift-serverless-workgroup-routes-within-vpc](./redshift-serverless-workgroup-routes-within-vpc.html)
-
@@ -2196,2 +2139,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [sagemaker-notebook-instance-platform-version](./sagemaker-notebook-instance-platform-version.html)
-
@@ -2451,2 +2392,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [aurora-mysql-cluster-audit-logging](./aurora-mysql-cluster-audit-logging.html)
-
@@ -2885,2 +2824,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fsx-ontap-deployment-type-check](./fsx-ontap-deployment-type-check.html)
-
@@ -2889,2 +2826,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fsx-openzfs-deployment-type-check](./fsx-openzfs-deployment-type-check.html)
-
@@ -2997,2 +2932,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mariadb-publish-logs-to-cloudwatch-logs](./mariadb-publish-logs-to-cloudwatch-logs.html)
-
@@ -3001,2 +2934,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-active-broker-ldap-authentication](./mq-active-broker-ldap-authentication.html)
-
@@ -3005,2 +2936,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-active-single-instance-broker-storage-type-efs](./mq-active-single-instance-broker-storage-type-efs.html)
-
@@ -3011,2 +2940,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-broker-general-logging-enabled](./mq-broker-general-logging-enabled.html)
-
@@ -3123,2 +3050,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [rds-mariadb-instance-encrypted-in-transit](./rds-mariadb-instance-encrypted-in-transit.html)
-
@@ -3141,2 +3066,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [rds-sqlserver-encrypted-in-transit](./rds-sqlserver-encrypted-in-transit.html)
-
@@ -3169,2 +3092,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [redshift-serverless-workgroup-routes-within-vpc](./redshift-serverless-workgroup-routes-within-vpc.html)
-
@@ -3253,2 +3174,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [sagemaker-notebook-instance-platform-version](./sagemaker-notebook-instance-platform-version.html)
-
@@ -3474,2 +3393,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [apprunner-vpc-connector-multi-az](./apprunner-vpc-connector-multi-az.html)
-
@@ -3480,2 +3397,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [appstream-fleet-multi-az](./appstream-fleet-multi-az.html)
-
@@ -3510,2 +3425,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [aurora-mysql-cluster-audit-logging](./aurora-mysql-cluster-audit-logging.html)
-
@@ -3690,2 +3603,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [docdb-cluster-encrypted-in-transit](./docdb-cluster-encrypted-in-transit.html)
-
@@ -3986,2 +3897,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fsx-ontap-deployment-type-check](./fsx-ontap-deployment-type-check.html)
-
@@ -3990,2 +3899,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fsx-openzfs-deployment-type-check](./fsx-openzfs-deployment-type-check.html)
-
@@ -4088,2 +3995,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [iottwinmaker-component-type-tagged](./iottwinmaker-component-type-tagged.html)
-
@@ -4142,2 +4047,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mariadb-publish-logs-to-cloudwatch-logs](./mariadb-publish-logs-to-cloudwatch-logs.html)
-
@@ -4146,2 +4049,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-active-broker-ldap-authentication](./mq-active-broker-ldap-authentication.html)
-
@@ -4150,2 +4051,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-active-single-instance-broker-storage-type-efs](./mq-active-single-instance-broker-storage-type-efs.html)
-
@@ -4156,2 +4055,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-broker-general-logging-enabled](./mq-broker-general-logging-enabled.html)
-
@@ -4270,2 +4167,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [rds-mariadb-instance-encrypted-in-transit](./rds-mariadb-instance-encrypted-in-transit.html)
-
@@ -4288,2 +4183,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [rds-sqlserver-encrypted-in-transit](./rds-sqlserver-encrypted-in-transit.html)
-
@@ -4316,2 +4209,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [redshift-serverless-workgroup-routes-within-vpc](./redshift-serverless-workgroup-routes-within-vpc.html)
-
@@ -4400,2 +4291,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [sagemaker-notebook-instance-platform-version](./sagemaker-notebook-instance-platform-version.html)
-
@@ -4631,2 +4520,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [aurora-mysql-cluster-audit-logging](./aurora-mysql-cluster-audit-logging.html)
-
@@ -5035,2 +4922,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fsx-ontap-deployment-type-check](./fsx-ontap-deployment-type-check.html)
-
@@ -5039,2 +4924,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fsx-openzfs-deployment-type-check](./fsx-openzfs-deployment-type-check.html)
-
@@ -5143,2 +5026,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mariadb-publish-logs-to-cloudwatch-logs](./mariadb-publish-logs-to-cloudwatch-logs.html)
-
@@ -5147,2 +5028,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-active-broker-ldap-authentication](./mq-active-broker-ldap-authentication.html)
-
@@ -5151,2 +5030,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-active-single-instance-broker-storage-type-efs](./mq-active-single-instance-broker-storage-type-efs.html)
-
@@ -5155,2 +5032,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [mq-broker-general-logging-enabled](./mq-broker-general-logging-enabled.html)
-
@@ -5263,2 +5138,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [rds-mariadb-instance-encrypted-in-transit](./rds-mariadb-instance-encrypted-in-transit.html)
-
@@ -5279,2 +5152,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [rds-sqlserver-encrypted-in-transit](./rds-sqlserver-encrypted-in-transit.html)
-
@@ -5387,2 +5258,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [sagemaker-notebook-instance-platform-version](./sagemaker-notebook-instance-platform-version.html)
-
@@ -5624,2 +5493,0 @@ AWS Config currently supports the following managed rules. Before using these ru