AWS securityhub documentation change
Summary
Removed FSx.3, FSx.4, FSx.5 controls and RedshiftServerless.1 control from reference table. Added comprehensive 'Topics' section with links to security controls documentation for various AWS services.
Security assessment
The removed controls were security best practice recommendations but their removal appears to be part of documentation reorganization rather than addressing a specific vulnerability. The added 'Topics' section enhances discoverability of security controls documentation across AWS services, which constitutes security documentation improvement.
Diff
diff --git a/securityhub/latest/userguide/securityhub-controls-reference.md b/securityhub/latest/userguide/securityhub-controls-reference.md index 172e9c5c0..bbec83fa6 100644 --- a/securityhub/latest/userguide/securityhub-controls-reference.md +++ b/securityhub/latest/userguide/securityhub-controls-reference.md @@ -284,3 +283,0 @@ Security control ID | Security control title | Applicable standards | Severity | -[FSx.3](./fsx-controls.html#fsx-3) | FSx for OpenZFS file systems should be configured for Multi-AZ deployment | AWS Foundational Security Best Practices v1.0.0 | MEDIUM | No | Periodic -[FSx.4](./fsx-controls.html#fsx-4) | FSx for NetApp ONTAP file systems should be configured for Multi-AZ deployment | AWS Foundational Security Best Practices v1.0.0 | MEDIUM | Yes | Periodic -[FSx.5](./fsx-controls.html#fsx-5) | FSx for Windows File Server file systems should be configured for Multi-AZ deployment | AWS Foundational Security Best Practices v1.0.0 | MEDIUM | No | Periodic @@ -470 +466,0 @@ Security control ID | Security control title | Applicable standards | Severity | -[RedshiftServerless.1](./redshiftserverless-controls.html#redshiftserverless-1) | Amazon Redshift Serverless workgroups should use enhanced VPC routing | AWS Foundational Security Best Practices v1.0.0 | HIGH | No | Periodic @@ -533,0 +530,161 @@ Security control ID | Security control title | Applicable standards | Severity | +###### Topics + + * [Security Hub controls for AWS accounts](./account-controls.html) + + * [Security Hub controls for API Gateway](./apigateway-controls.html) + + * [Security Hub controls for AWS AppConfig](./appconfig-controls.html) + + * [Security Hub controls for Amazon AppFlow](./appflow-controls.html) + + * [Security Hub controls for AWS App Runner](./apprunner-controls.html) + + * [Security Hub controls for AWS AppSync](./appsync-controls.html) + + * [Security Hub controls for Athena](./athena-controls.html) + + * [Security Hub controls for AWS Backup](./backup-controls.html) + + * [Security Hub controls for AWS Batch](./batch-controls.html) + + * [Security Hub controls for ACM](./acm-controls.html) + + * [Security Hub controls for AWS CloudFormation](./cloudformation-controls.html) + + * [Security Hub controls for CloudFront](./cloudfront-controls.html) + + * [Security Hub controls for CloudTrail](./cloudtrail-controls.html) + + * [Security Hub controls for CloudWatch](./cloudwatch-controls.html) + + * [Security Hub controls for CodeArtifact](./codeartifact-controls.html) + + * [Security Hub controls for CodeBuild](./codebuild-controls.html) + + * [Security Hub controls for Amazon CodeGuru Profiler](./codeguruprofiler-controls.html) + + * [Security Hub controls for Amazon CodeGuru Reviewer](./codegurureviewer-controls.html) + + * [Security Hub controls for Amazon Cognito](./cognito-controls.html) + + * [Security Hub controls for AWS Config](./config-controls.html) + + * [Security Hub controls for Amazon Connect](./connect-controls.html) + + * [Security Hub controls for Amazon Data Firehose](./datafirehose-controls.html) + + * [Security Hub controls for DataSync](./datasync-controls.html) + + * [Security Hub controls for Detective](./detective-controls.html) + + * [Security Hub controls for AWS DMS](./dms-controls.html) + + * [Security Hub controls for Amazon DocumentDB](./documentdb-controls.html) + + * [Security Hub controls for DynamoDB](./dynamodb-controls.html) + + * [Security Hub controls for Amazon EC2](./ec2-controls.html) + + * [Security Hub controls for Auto Scaling](./autoscaling-controls.html) + + * [Security Hub controls for Amazon ECR](./ecr-controls.html) + + * [Security Hub controls for Amazon ECS](./ecs-controls.html) + + * [Security Hub controls for Amazon EFS](./efs-controls.html) + + * [Security Hub controls for Amazon EKS](./eks-controls.html) + + * [Security Hub controls for ElastiCache](./elasticache-controls.html) + + * [Security Hub controls for Elastic Beanstalk](./elasticbeanstalk-controls.html) + + * [Security Hub controls for Elastic Load Balancing](./elb-controls.html) + + * [Security Hub for Elasticsearch](./es-controls.html) + + * [Security Hub controls for Amazon EMR](./emr-controls.html) + + * [Security Hub controls for EventBridge](./eventbridge-controls.html) + + * [Security Hub controls for Amazon Fraud Detector](./frauddetector-controls.html) + + * [Security Hub controls for Amazon FSx](./fsx-controls.html) + + * [Security Hub controls for Global Accelerator](./globalaccelerator-controls.html) + + * [Security Hub controls for AWS Glue](./glue-controls.html) + + * [Security Hub controls for GuardDuty](./guardduty-controls.html) + + * [Security Hub controls for IAM](./iam-controls.html) + + * [Security Hub controls for Amazon Inspector](./inspector-controls.html) + + * [Security Hub controls for AWS IoT](./iot-controls.html) + + * [Security Hub controls for AWS IoT Events](./iotevents-controls.html) + + * [Security Hub controls for AWS IoT SiteWise](./iotsitewise-controls.html) + + * [Security Hub controls for AWS IoT TwinMaker](./iottwinmaker-controls.html) + + * [Security Hub controls for AWS IoT Wireless](./iotwireless-controls.html) + + * [Security Hub controls for Amazon IVS](./ivs-controls.html) + + * [Security Hub controls for Amazon Keyspaces](./keyspaces-controls.html) + + * [Security Hub controls for Kinesis](./kinesis-controls.html) + + * [Security Hub controls for AWS KMS](./kms-controls.html) + + * [Security Hub controls for Lambda](./lambda-controls.html) + + * [Security Hub controls for Macie](./macie-controls.html) + + * [Security Hub controls for Amazon MSK](./msk-controls.html) + + * [Security Hub controls for Amazon MQ](./mq-controls.html) + + * [Security Hub controls for Neptune](./neptune-controls.html) + + * [Security Hub controls for Network Firewall](./networkfirewall-controls.html) + + * [Security Hub controls for OpenSearch Service](./opensearch-controls.html) + + * [Security Hub controls for AWS Private CA](./pca-controls.html) + + * [Security Hub controls for Amazon RDS](./rds-controls.html) + + * [Security Hub controls for Amazon Redshift](./redshift-controls.html) + + * [Security Hub controls for Route 53](./route53-controls.html) + + * [Security Hub controls for Amazon S3](./s3-controls.html) + + * [Security Hub controls for SageMaker AI](./sagemaker-controls.html) + + * [Security Hub controls for Secrets Manager](./secretsmanager-controls.html) + + * [Security Hub controls for Service Catalog](./servicecatalog-controls.html) + + * [Security Hub controls for Amazon SES](./ses-controls.html) + + * [Security Hub controls for Amazon SNS](./sns-controls.html) + + * [Security Hub controls for Amazon SQS](./sqs-controls.html) + + * [Security Hub controls for Step Functions](./stepfunctions-controls.html) + + * [Security Hub controls for Systems Manager](./ssm-controls.html) + + * [Security Hub controls for Transfer Family](./transfer-controls.html) + + * [Security Hub controls for AWS WAF](./waf-controls.html) + + * [Security Hub controls for WorkSpaces](./workspaces-controls.html) + + + +