AWS Security ChangesHomeSearch

AWS securityhub documentation change

Service: securityhub · 2025-04-16 · Documentation low

File: securityhub/latest/userguide/apprunner-controls.md

Summary

Added maximum item limit (6) constraint for requiredKeyTags parameter in StringList type across multiple controls

Security assessment

Documentation clarification about allowed tag count limits, not tied to security incidents

Diff

diff --git a/securityhub/latest/userguide/apprunner-controls.md b/securityhub/latest/userguide/apprunner-controls.md
index cefe473ae..e96032756 100644
--- a//securityhub/latest/userguide/apprunner-controls.md
+++ b//securityhub/latest/userguide/apprunner-controls.md
@@ -29 +29 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  | No default value   
@@ -59 +59 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  | No default value