AWS securityhub documentation change
Summary
Added maximum limit of 6 items for requiredTagKeys parameter in security controls documentation
Security assessment
Change specifies a constraint on tag key quantity but does not address a specific vulnerability. Part of general security control documentation about resource tagging requirements.
Diff
diff --git a/securityhub/latest/userguide/athena-controls.md b/securityhub/latest/userguide/athena-controls.md index 08ae19512..3962191cd 100644 --- a//securityhub/latest/userguide/athena-controls.md +++ b//securityhub/latest/userguide/athena-controls.md @@ -57 +57 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | `No default value` +`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | `No default value` @@ -87 +87 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | `No default value` +`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | `No default value`