AWS config documentation change
Summary
Added 40+ new managed rules covering security controls (encryption, logging, access) and resource tagging
Security assessment
Documents new security-focused managed rules but does not indicate remediation of specific vulnerabilities.
Diff
diff --git a/config/latest/developerguide/DocumentHistory.md b/config/latest/developerguide/DocumentHistory.md index 1eb61476a..f3a9cad08 100644 --- a/config/latest/developerguide/DocumentHistory.md +++ b/config/latest/developerguide/DocumentHistory.md @@ -13 +13 @@ The following table describes the important changes to the documentation for AWS - * Latest documentation update: March 19, 2025 + * Latest documentation update: March 22, 2025 @@ -19,0 +20,61 @@ Change| Description| Date +AWS Config updates managed rules| With this release, AWS Config supports the following managed rules: + + * [nlb-cross-zone-load-balancing-enabled](https://docs.aws.amazon.com/config/latest/developerguide/nlb-cross-zone-load-balancing-enabled.html) + * [redshift-serverless-publish-logs-to-cloudwatch](https://docs.aws.amazon.com/config/latest/developerguide/redshift-serverless-publish-logs-to-cloudwatch.html) + * [rds-instance-subnet-igw-check](https://docs.aws.amazon.com/config/latest/developerguide/rds-instance-subnet-igw-check.html) + * [ec2-spot-fleet-request-ct-encryption-at-rest](https://docs.aws.amazon.com/config/latest/developerguide/ec2-spot-fleet-request-ct-encryption-at-rest.html) + * [redshift-serverless-workgroup-encrypted-in-transit](https://docs.aws.amazon.com/config/latest/developerguide/redshift-serverless-workgroup-encrypted-in-transit.html) + * [redshift-serverless-workgroup-no-public-access](https://docs.aws.amazon.com/config/latest/developerguide/redshift-serverless-workgroup-no-public-access.html) + * [redshift-serverless-namespace-cmk-encryption](https://docs.aws.amazon.com/config/latest/developerguide/redshift-serverless-namespace-cmk-encryption.html) + * [event-data-store-cmk-encryption-enabled](https://docs.aws.amazon.com/config/latest/developerguide/event-data-store-cmk-encryption-enabled.html) + * [ecs-task-definition-network-mode-not-host](https://docs.aws.amazon.com/config/latest/developerguide/ecs-task-definition-network-mode-not-host.html) + * [rds-proxy-tls-encryption](https://docs.aws.amazon.com/config/latest/developerguide/rds-proxy-tls-encryption.html) + * [nlb-logging-enabled](https://docs.aws.amazon.com/config/latest/developerguide/nlb-logging-enabled.html) + * [redshift-audit-logging-enabled](https://docs.aws.amazon.com/config/latest/developerguide/redshift-audit-logging-enabled.html) + * [s3-lifecycle-policy-check](https://docs.aws.amazon.com/config/latest/developerguide/s3-lifecycle-policy-check.html) + * [sagemaker-image-tagged](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-image-tagged.html) + * [redshift-cluster-parameter-group-tagged](https://docs.aws.amazon.com/config/latest/developerguide/redshift-cluster-parameter-group-tagged.html) + * [ec2-dhcp-options-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-dhcp-options-tagged.html) + * [sagemaker-app-image-config-tagged](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-app-image-config-tagged.html) + * [mariadb-publish-logs-to-cloudwatch-logs](https://docs.aws.amazon.com/config/latest/developerguide/mariadb-publish-logs-to-cloudwatch-logs.html) + * [docdb-cluster-encrypted-in-transit](https://docs.aws.amazon.com/config/latest/developerguide/docdb-cluster-encrypted-in-transit.html) + * [rds-sqlserver-encrypted-in-transit](https://docs.aws.amazon.com/config/latest/developerguide/rds-sqlserver-encrypted-in-transit.html) + * [ec2-traffic-mirror-session-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-traffic-mirror-session-tagged.html) + * [ec2-launch-template-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-launch-template-tagged.html) + * [ec2-traffic-mirror-target-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-traffic-mirror-target-tagged.html) + * [transfer-certificate-tagged](https://docs.aws.amazon.com/config/latest/developerguide/transfer-certificate-tagged.html) + * [batch-managed-compute-env-compute-resources-tagged](https://docs.aws.amazon.com/config/latest/developerguide/batch-managed-compute-env-compute-resources-tagged.html) + * [lightsail-disk-tagged](https://docs.aws.amazon.com/config/latest/developerguide/lightsail-disk-tagged.html) + * [transfer-profile-tagged](https://docs.aws.amazon.com/config/latest/developerguide/transfer-profile-tagged.html) + * [amplify-app-tagged](https://docs.aws.amazon.com/config/latest/developerguide/amplify-app-tagged.html) + * [ec2-prefix-list-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-prefix-list-tagged.html) + * [amplify-branch-tagged](https://docs.aws.amazon.com/config/latest/developerguide/amplify-branch-tagged.html) + * [transfer-agreement-tagged](https://docs.aws.amazon.com/config/latest/developerguide/transfer-agreement-tagged.html) + * [datasync-task-tagged](https://docs.aws.amazon.com/config/latest/developerguide/datasync-task-tagged.html) + * [transfer-workflow-tagged](https://docs.aws.amazon.com/config/latest/developerguide/transfer-workflow-tagged.html) + * [sagemaker_notebook_instance_platform_version](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker_notebook_instance_platform_version.html) + * [ec2-traffic-mirror-filter-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-traffic-mirror-filter-tagged.html) + * [aurora-mysql-cluster-audit-logging](https://docs.aws.amazon.com/config/latest/developerguide/aurora-mysql-cluster-audit-logging.html) + * [ssm-document-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ssm-document-tagged.html) + * [transfer-connector-tagged](https://docs.aws.amazon.com/config/latest/developerguide/transfer-connector-tagged.html) + * [rds-mariadb-instance-encrypted-in-transit](https://docs.aws.amazon.com/config/latest/developerguide/rds-mariadb-instance-encrypted-in-transit.html) + * [iam-saml-provider-tagged](https://docs.aws.amazon.com/config/latest/developerguide/iam-saml-provider-tagged.html) + * [ec2-fleet-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-fleet-tagged.html) + * [iam-server-certificate-tagged](https://docs.aws.amazon.com/config/latest/developerguide/iam-server-certificate-tagged.html) + * [iam-oidc-provider-tagged](https://docs.aws.amazon.com/config/latest/developerguide/iam-oidc-provider-tagged.html) + * [alb-listener-tagged](https://docs.aws.amazon.com/config/latest/developerguide/alb-listener-tagged.html) + * [glb-listener-tagged](https://docs.aws.amazon.com/config/latest/developerguide/glb-listener-tagged.html) + * [ec2-network-insights-access-scope-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-network-insights-access-scope-tagged.html) + * [lightsail-certificate-tagged](https://docs.aws.amazon.com/config/latest/developerguide/lightsail-certificate-tagged.html) + * [ec2-capacity-reservation-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-capacity-reservation-tagged.html) + * [ec2-transit-gateway-multicast-domain-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-transit-gateway-multicast-domain-tagged.html) + * [dms-endpoint-tagged](https://docs.aws.amazon.com/config/latest/developerguide/dms-endpoint-tagged.html) + * [ec2-carrier-gateway-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-carrier-gateway-tagged.html) + * [dms-replication-task-tagged](https://docs.aws.amazon.com/config/latest/developerguide/dms-replication-task-tagged.html) + * [ec2-client-vpn-endpoint-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-client-vpn-endpoint-tagged.html) + * [lightsail-bucket-tagged](https://docs.aws.amazon.com/config/latest/developerguide/lightsail-bucket-tagged.html) + * [ec2-network-insights-access-scope-analysis-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-network-insights-access-scope-analysis-tagged.html) + * [nlb-listener-tagged](https://docs.aws.amazon.com/config/latest/developerguide/nlb-listener-tagged.html) + * [ec2-network-insights-path-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-network-insights-path-tagged.html) + +| March 22, 2025 @@ -30 +90,0 @@ AWS Config updates managed rules| With this release, AWS Config supports the fol - * [apprunner-vpc-connector-multi-az](https://docs.aws.amazon.com/config/latest/developerguide/apprunner-vpc-connector-multi-az.html)