AWS Security ChangesHomeSearch

AWS config documentation change

Service: config · 2025-04-03 · Documentation low

File: config/latest/developerguide/managing-rules-by-region-availability.md

Summary

Added multiple new AWS Config managed rules across regions for resource tagging checks (Cognito User Pools, ECR repositories, S3 buckets, SageMaker domains, and SageMaker feature groups)

Security assessment

The changes document new managed rules that enforce tagging compliance. While tagging is a security best practice for resource management and access control, there is no explicit mention of addressing a specific security vulnerability or incident.

Diff

diff --git a/config/latest/developerguide/managing-rules-by-region-availability.md b/config/latest/developerguide/managing-rules-by-region-availability.md
index de9453810..6ace3b4c4 100644
--- a//config/latest/developerguide/managing-rules-by-region-availability.md
+++ b//config/latest/developerguide/managing-rules-by-region-availability.md
@@ -286,0 +287,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -478,0 +481,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -1032,0 +1037,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -1054,0 +1061,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -1058,0 +1067,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-feature-group-tagged](./sagemaker-feature-group-tagged.html)
+
@@ -1485,0 +1496,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -1687,0 +1700,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -2277,0 +2292,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -2299,0 +2316,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -2303,0 +2322,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-feature-group-tagged](./sagemaker-feature-group-tagged.html)
+
@@ -2694,0 +2715,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -2874,0 +2897,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -3384,0 +3409,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -3406,0 +3433,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -3410,0 +3439,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-feature-group-tagged](./sagemaker-feature-group-tagged.html)
+
@@ -3807,0 +3838,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -4009,0 +4042,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -4589,0 +4624,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -4611,0 +4648,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -4615,0 +4654,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-feature-group-tagged](./sagemaker-feature-group-tagged.html)
+
@@ -4974,0 +5015,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -5136,0 +5179,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -5620,0 +5665,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -5640,0 +5687,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -5644,0 +5693,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-feature-group-tagged](./sagemaker-feature-group-tagged.html)
+
@@ -6013,0 +6064,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -6197,0 +6250,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -6701,0 +6756,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -6721,0 +6778,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -6725,0 +6784,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-feature-group-tagged](./sagemaker-feature-group-tagged.html)
+
@@ -6982,0 +7043,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -7088,0 +7151,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -7412,0 +7477,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -7675,0 +7742,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -7777,0 +7846,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -8195,0 +8266,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -8207,0 +8280,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -8211,0 +8286,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-feature-group-tagged](./sagemaker-feature-group-tagged.html)
+
@@ -8731,0 +8808,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -8833,0 +8912,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -9151,0 +9232,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -9502,0 +9585,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -9692,0 +9777,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -10240,0 +10327,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -10262,0 +10351,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -10266,0 +10357,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-feature-group-tagged](./sagemaker-feature-group-tagged.html)
+
@@ -10619,0 +10712,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -10771,0 +10866,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -11237,0 +11334,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -11259,0 +11358,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -11263,0 +11364,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-feature-group-tagged](./sagemaker-feature-group-tagged.html)
+
@@ -11636,0 +11739,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -11832,0 +11937,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -12380,0 +12487,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -12402,0 +12511,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -12406,0 +12517,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-feature-group-tagged](./sagemaker-feature-group-tagged.html)
+
@@ -12807,0 +12920,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -13005,0 +13120,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -13571,0 +13688,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -13593,0 +13712,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -13597,0 +13718,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-feature-group-tagged](./sagemaker-feature-group-tagged.html)
+
@@ -13998,0 +14121,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [cognito-user-pool-tagged](./cognito-user-pool-tagged.html)
+
@@ -14198,0 +14323,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [ecr-repository-tagged](./ecr-repository-tagged.html)
+
@@ -14770,0 +14897,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [s3-bucket-tagged](./s3-bucket-tagged.html)
+
@@ -14792,0 +14921,2 @@ AWS Config currently supports the following managed rules. Before using these ru
+  * [sagemaker-domain-tagged](./sagemaker-domain-tagged.html)
+
@@ -14796,0 +14927,2 @@ AWS Config currently supports the following managed rules. Before using these ru