AWS securityhub documentation change

Service: securityhub · 2025-03-26 · Documentation low

File: securityhub/latest/userguide/asff-changes-consolidation.md

Summary

Updated SageMaker control names from 'SageMaker AI.X' to 'SageMaker.X' across multiple standards and PCI DSS control description

Security assessment

Change appears to be a rebranding/renaming of control identifiers without indicating any security vulnerability resolution. The PCI DSS control description change removes 'AI' from notebook instance references but maintains the same security guidance.

Diff

diff --git a/securityhub/latest/userguide/asff-changes-consolidation.md b/securityhub/latest/userguide/asff-changes-consolidation.md
index e70bd5f76..f252f1fb8 100644
--- a/securityhub/latest/userguide/asff-changes-consolidation.md
+++ b/securityhub/latest/userguide/asff-changes-consolidation.md
@@ -341,3 +341,3 @@ aws-foundational-security-best-practices/v/1.0.0/S3.9 |  security-control/S3.9
-aws-foundational-security-best-practices/v/1.0.0/SageMaker AI.1 |  security-control/SageMaker AI.1  
-aws-foundational-security-best-practices/v/1.0.0/SageMaker AI.2 |  security-control/SageMaker AI.2  
-aws-foundational-security-best-practices/v/1.0.0/SageMaker AI.3 |  security-control/SageMaker AI.3  
+aws-foundational-security-best-practices/v/1.0.0/SageMaker.1 |  security-control/SageMaker.1  
+aws-foundational-security-best-practices/v/1.0.0/SageMaker.2 |  security-control/SageMaker.2  
+aws-foundational-security-best-practices/v/1.0.0/SageMaker.3 |  security-control/SageMaker.3  
@@ -401 +401 @@ pci-dss/v/3.2.1/PCI.S3.6 |  security-control/S3.1
-pci-dss/v/3.2.1/PCI.SageMaker AI.1 |  security-control/SageMaker AI.1  
+pci-dss/v/3.2.1/PCI.SageMaker.1 |  security-control/SageMaker.1  
@@ -550 +550 @@ service-managed-aws-control-tower/v/1.0.0/S3.13 |  security-control/S3.13
-service-managed-aws-control-tower/v/1.0.0/SageMaker AI.1 |  security-control/SageMaker AI.1  
+service-managed-aws-control-tower/v/1.0.0/SageMaker.1 |  security-control/SageMaker.1  
@@ -697 +697 @@ PCI DSS v3.2.1 |  PCI.S3.6 S3 Block Public Access setting should be enabled |  [
-PCI DSS v3.2.1 |  PCI.SageMaker AI.1 Amazon SageMaker AI notebook instances should not have direct internet access |  [[SageMaker.1] Amazon SageMaker AI notebook instances should not have direct internet access](./sagemaker-controls.html#sagemaker-1)  
+PCI DSS v3.2.1 |  PCI.SageMaker.1 Amazon SageMaker notebook instances should not have direct internet access |  [[SageMaker.1] Amazon SageMaker notebook instances should not have direct internet access](./sagemaker-controls.html#sagemaker-1)