AWS securityhub documentation change
Summary
Updated AWS Config rule link formatting and added Ruby 3.4 to supported Lambda runtimes
Security assessment
Changes involve documentation formatting and runtime version updates without addressing specific security vulnerabilities or introducing new security features.
Diff
diff --git a/securityhub/latest/userguide/lambda-controls.md b/securityhub/latest/userguide/lambda-controls.md index 0e6ac4424..65545f964 100644 --- a/securityhub/latest/userguide/lambda-controls.md +++ b/securityhub/latest/userguide/lambda-controls.md @@ -21 +21 @@ These AWS Security Hub controls evaluate the AWS Lambda service and resources. T -**AWS Config rule:** [`lambda-function-public-access-prohibited`](https://docs.aws.amazon.com/config/latest/developerguide/lambda-function-public-access-prohibited.html) +**AWS Config rule:** [lambda-function-public-access-prohibited](https://docs.aws.amazon.com/config/latest/developerguide/lambda-function-public-access-prohibited.html) @@ -37 +37 @@ To start, [ review the resource-based policy](https://docs.aws.amazon.com/lambda -You cannot edit the policy from the console. To remove permissions from the function, run the [`remove-permission`](https://docs.aws.amazon.com/cli/latest/reference/lambda/remove-permission.html) command from the AWS CLI. +You cannot edit the policy from the console. To remove permissions from the function, run the [remove-permission](https://docs.aws.amazon.com/cli/latest/reference/lambda/remove-permission.html) command from the AWS CLI. @@ -54 +54 @@ Replace ``<function-name>`` with the name of the Lambda function, and ``<stateme -**AWS Config rule:** [`lambda-function-settings-check`](https://docs.aws.amazon.com/config/latest/developerguide/lambda-function-settings-check.html) +**AWS Config rule:** [lambda-function-settings-check](https://docs.aws.amazon.com/config/latest/developerguide/lambda-function-settings-check.html) @@ -60 +60 @@ Replace ``<function-name>`` with the name of the Lambda function, and ``<stateme - * `runtime`: `dotnet8, java21, java17, java11, java8.al2, nodejs22.x, nodejs20.x, nodejs18.x, python3.13, python3.12, python3.11, python3.10, python3.9, ruby3.3, ruby3.2` (not customizable) + * `runtime`: `dotnet8, java21, java17, java11, java8.al2, nodejs22.x, nodejs20.x, nodejs18.x, python3.13, python3.12, python3.11, python3.10, python3.9, ruby3.4, ruby3.3, ruby3.2` (not customizable) @@ -65 +65 @@ Replace ``<function-name>`` with the name of the Lambda function, and ``<stateme -This control checks whether AWS Lambda function runtime settings match the expected values set for the supported runtimes in each language. The control fails if the Lambda function doesn't use a supported runtime, noted previously in the Parameters section. Security Hub ignores functions that have a package type of `Image`. +This control checks whether AWS Lambda function runtime settings match the expected values set for the supported runtimes in each language. The control fails if the Lambda function doesn't use a supported runtime, as noted in the Parameters section. Security Hub ignores functions that have a package type of `Image`. @@ -83 +83 @@ For more information about supported runtimes and deprecation schedules, see [Ru -**AWS Config rule:** [`lambda-inside-vpc`](https://docs.aws.amazon.com/config/latest/developerguide/lambda-inside-vpc.html) +**AWS Config rule:** [lambda-inside-vpc](https://docs.aws.amazon.com/config/latest/developerguide/lambda-inside-vpc.html) @@ -107 +107 @@ To configure an existing function to connect to private subnets in your VPC, see -**AWS Config rule:** [`lambda-vpc-multi-az-check`](https://docs.aws.amazon.com/config/latest/developerguide/lambda-vpc-multi-az-check.html) +**AWS Config rule:** [lambda-vpc-multi-az-check](https://docs.aws.amazon.com/config/latest/developerguide/lambda-vpc-multi-az-check.html)