AWS Security ChangesHomeSearch

AWS securityhub documentation change

Service: securityhub · 2025-04-16 · Documentation low

File: securityhub/latest/userguide/appconfig-controls.md

Summary

Added maximum item limit (6) constraint for requiredKeyTags parameter in StringList type across multiple controls

Security assessment

Documentation update clarifies parameter limits without evidence of addressing security vulnerabilities

Diff

diff --git a/securityhub/latest/userguide/appconfig-controls.md b/securityhub/latest/userguide/appconfig-controls.md
index 872867079..e0e236b5c 100644
--- a//securityhub/latest/userguide/appconfig-controls.md
+++ b//securityhub/latest/userguide/appconfig-controls.md
@@ -29 +29 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  | No default value   
@@ -59 +59 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  | No default value   
@@ -89 +89 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  | No default value   
@@ -119 +119 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  | No default value