AWS Security ChangesHomeSearch

AWS config documentation change

Service: config · 2025-04-11 · Documentation low

File: config/latest/developerguide/managing-rules-by-region-availability.md

Summary

Removed multiple managed rules from AWS Config documentation across various sections, including beanstalk-logs-to-cloudwatch, ecr-repository-lifecycle-policy-configured, elasticsearch-update-check, fms-security-group-audit-policy-check, and nlb-cross-zone-load-balancing-enabled

Security assessment

The changes remove references to specific managed rules but provide no context about security vulnerabilities. While some removed rules (like fms-security-group-audit-policy-check) have security implications, the removal itself doesn't indicate a security fix - it could reflect rule deprecation or regional availability changes without explicit security context.

Diff

diff --git a/config/latest/developerguide/managing-rules-by-region-availability.md b/config/latest/developerguide/managing-rules-by-region-availability.md
index 6ace3b4c4..21af60e3a 100644
--- a//config/latest/developerguide/managing-rules-by-region-availability.md
+++ b//config/latest/developerguide/managing-rules-by-region-availability.md
@@ -209,2 +208,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -479,2 +476,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -577,2 +572,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [elasticsearch-update-check](./elasticsearch-update-check.html)
-
@@ -635,2 +628,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -863,2 +854,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -1392,2 +1381,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -1698,2 +1685,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -1796,2 +1781,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [elasticsearch-update-check](./elasticsearch-update-check.html)
-
@@ -1854,2 +1837,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -2114,2 +2095,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -2641,2 +2620,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -2895,2 +2872,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -2993,2 +2968,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [elasticsearch-update-check](./elasticsearch-update-check.html)
-
@@ -3039,2 +3012,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -3235,2 +3206,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -3760,2 +3729,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -4040,2 +4007,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -4138,2 +4103,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [elasticsearch-update-check](./elasticsearch-update-check.html)
-
@@ -4196,2 +4159,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -4448,2 +4409,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -4949,2 +4908,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -5177,2 +5134,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -5317,2 +5272,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -5503,2 +5456,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -5994,2 +5945,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -6248,2 +6197,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -6346,2 +6293,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [elasticsearch-update-check](./elasticsearch-update-check.html)
-
@@ -6392,2 +6337,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -6586,2 +6529,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -7247,2 +7188,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -7844,2 +7783,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -7920,2 +7857,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [elasticsearch-update-check](./elasticsearch-update-check.html)
-
@@ -7954,2 +7889,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -8539,2 +8472,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -8996,2 +8927,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -9511,2 +9440,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -9775,2 +9702,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -9873,2 +9798,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [elasticsearch-update-check](./elasticsearch-update-check.html)
-
@@ -9919,2 +9842,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -10153,2 +10074,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -10864,2 +10783,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -10976,2 +10893,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -11170,2 +11085,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -11665,2 +11578,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -11935,2 +11846,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -12033,2 +11942,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [elasticsearch-update-check](./elasticsearch-update-check.html)
-
@@ -12079,2 +11986,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -12313,2 +12218,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -12842,2 +12745,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -13118,2 +13019,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -13216,2 +13115,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [elasticsearch-update-check](./elasticsearch-update-check.html)
-
@@ -13274,2 +13171,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -13512,2 +13407,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -14043,2 +13936,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -14321,2 +14212,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -14419,2 +14308,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [elasticsearch-update-check](./elasticsearch-update-check.html)
-
@@ -14477,2 +14364,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -14721,2 +14606,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -15210,2 +15093,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -15527,2 +15408,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -15805,2 +15684,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [ecr-repository-lifecycle-policy-configured](./ecr-repository-lifecycle-policy-configured.html)
-
@@ -15903,2 +15780,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [elasticsearch-update-check](./elasticsearch-update-check.html)
-
@@ -15961,2 +15836,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [fms-security-group-audit-policy-check](./fms-security-group-audit-policy-check.html)
-
@@ -16203,2 +16076,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [nlb-cross-zone-load-balancing-enabled](./nlb-cross-zone-load-balancing-enabled.html)
-
@@ -16720,2 +16591,0 @@ AWS Config currently supports the following managed rules. Before using these ru
-  * [beanstalk-logs-to-cloudwatch](./beanstalk-logs-to-cloudwatch.html)
-
@@ -16988,2 +16857,0 @@ AWS Config currently supports the following managed rules. Before using these ru