AWS securityhub documentation change
Summary
Updated parameter constraints for tag keys (added maximum items limit) and rephrased service references
Security assessment
Clarifies existing tagging parameter constraints but does not introduce new security features or address specific vulnerabilities.
Diff
diff --git a/securityhub/latest/userguide/detective-controls.md b/securityhub/latest/userguide/detective-controls.md index 119886a10..9d8bf1132 100644 --- a//securityhub/latest/userguide/detective-controls.md +++ b//securityhub/latest/userguide/detective-controls.md @@ -7 +7 @@ -# Security Hub controls for Detective +# Security Hub controls for Amazon Detective @@ -9,3 +9 @@ -These Security Hub controls evaluate the Amazon Detective service and resources. - -These controls may not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). +This AWS Security Hub control evaluates the Amazon Detective service and resources. The control might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support). @@ -29 +27 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | `No default value` +`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | `No default value`