AWS securityhub documentation change
Summary
Updated requiredTagKeys parameter documentation with 6-item limit in two locations for EKS controls
Security assessment
Documentation update clarifies parameter constraints without addressing specific security vulnerabilities. Tag requirements are configuration guidelines.
Diff
diff --git a/securityhub/latest/userguide/eks-controls.md b/securityhub/latest/userguide/eks-controls.md index c49d8c0ee..5233144ee 100644 --- a//securityhub/latest/userguide/eks-controls.md +++ b//securityhub/latest/userguide/eks-controls.md @@ -104 +104 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value +`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | No default value @@ -134 +134 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value +`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | No default value