AWS securityhub medium security documentation change
Summary
Added entry for Lambda.2 control update regarding deprecated runtimes and minor wording changes from 'may' to 'can'
Security assessment
Explicitly documents deprecation of unsupported Lambda runtimes (dotnet6, python3.8) which could expose users to security risks from unpatched vulnerabilities. This change alerts users to update runtime environments for security compliance.
Diff
diff --git a/securityhub/latest/userguide/controls-change-log.md b/securityhub/latest/userguide/controls-change-log.md index f591f373f..7c0047fbb 100644 --- a/securityhub/latest/userguide/controls-change-log.md +++ b/securityhub/latest/userguide/controls-change-log.md @@ -7 +7 @@ -The following change log tracks material changes to existing AWS Security Hub security controls, which may result in changes to the overall status of a control and the compliance status of its findings. For information about how Security Hub evaluates control status, see [Evaluating compliance status and control status in Security Hub](./controls-overall-status.html). Changes may take a few days after their entry in this log to affect all AWS Regions in which the control is available. +The following change log tracks material changes to existing AWS Security Hub security controls, which can result in changes to the overall status of a control and the compliance status of its findings. For information about how Security Hub evaluates control status, see [Evaluating compliance status and control status in Security Hub](./controls-overall-status.html). Changes can take a few days after their entry in this log to affect all AWS Regions in which the control is available. @@ -12,0 +13 @@ Date of change | Control ID and title | Description of change +March 10, 2025 | [[Lambda.2] Lambda functions should use supported runtimes](./lambda-controls.html#lambda-2) | This control checks whether the runtime settings for an AWS Lambda function match expected values for supported runtimes in each language. Security Hub no longer supports `dotnet6` and `python3.8` as parameter values for this control. AWS Lambda no longer supports these runtimes.