AWS securityhub documentation change
Summary
Updated EKS control documentation with Kubernetes version 1.30 support, link corrections, and editorial changes
Security assessment
Reflects updates to security controls for supported Kubernetes versions and improves documentation clarity. No evidence of addressing an active security vulnerability.
Diff
diff --git a/securityhub/latest/userguide/eks-controls.md b/securityhub/latest/userguide/eks-controls.md index 4620bbda4..54e2eeb30 100644 --- a/securityhub/latest/userguide/eks-controls.md +++ b/securityhub/latest/userguide/eks-controls.md @@ -9,3 +9 @@ -These Security Hub controls evaluate the Amazon Elastic Kubernetes Service (Amazon EKS) service and resources. - -These controls may not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). +These Security Hub controls evaluate the Amazon Elastic Kubernetes Service (Amazon EKS) service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). @@ -23 +21 @@ These controls may not be available in all AWS Regions. For more information, se -**AWS Config rule:** [`eks-endpoint-no-public-access`](https://docs.aws.amazon.com/config/latest/developerguide/eks-endpoint-no-public-access.html) +**AWS Config rule:** [eks-endpoint-no-public-access](https://docs.aws.amazon.com/config/latest/developerguide/eks-endpoint-no-public-access.html) @@ -47 +45 @@ To modify endpoint access for an existing EKS cluster, see [Modifying cluster en -**AWS Config rule:** [`eks-cluster-supported-version`](https://docs.aws.amazon.com/config/latest/developerguide/eks-cluster-supported-version.html) +**AWS Config rule:** [eks-cluster-supported-version](https://docs.aws.amazon.com/config/latest/developerguide/eks-cluster-supported-version.html) @@ -53 +51 @@ To modify endpoint access for an existing EKS cluster, see [Modifying cluster en - * `oldestVersionSupported`: `1.29` (not customizable) + * `oldestVersionSupported`: `1.30` (not customizable) @@ -60 +58 @@ This control checks whether an Amazon Elastic Kubernetes Service (Amazon EKS) cl -If your application doesn't require a specific version of Kubernetes, we recommend that you use the latest available Kubernetes version that's supported by EKS for your clusters. For more information, see [Amazon EKS Kubernetes release calendar](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-release-calendar) and [Amazon EKS version support and FAQ](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#version-deprecation) in the __Amazon EKS User Guide__. +If your application doesn't require a specific version of Kubernetes, we recommend that you use the latest available Kubernetes version that's supported by EKS for your clusters. For more information, see [Amazon EKS Kubernetes release calendar](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-release-calendar) and [Understand the Kubernetes version lifecycle on Amazon EKS](https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#version-deprecation) in the __Amazon EKS User Guide__. @@ -64 +62 @@ If your application doesn't require a specific version of Kubernetes, we recomme -To update an EKS cluster, [Updating an Amazon EKS cluster Kubernetes version](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html) in the __Amazon EKS User Guide__. +To update an EKS cluster, see [Update an existing cluster to a new Kubernetes version](https://docs.aws.amazon.com/eks/latest/userguide/update-cluster.html) in the __Amazon EKS User Guide__. @@ -68 +66 @@ To update an EKS cluster, [Updating an Amazon EKS cluster Kubernetes version](ht -**Related requirements:** NIST.800-53.r5 SC-8, NIST.800-53.r5 SC-12, NIST.800-53.r5 SC-13, NIST.800-53.r5 SI-28, PCI DSS v4.0.1/8.3.2 +**Related requirements:** NIST.800-53.r5 SC-8, NIST.800-53.r5 SC-12, NIST.800-53.r5 SC-13, PCI DSS v4.0.1/8.3.2