AWS Security ChangesHomeSearch

AWS securityhub documentation change

Service: securityhub · 2025-04-16 · Documentation low

File: securityhub/latest/userguide/frauddetector-controls.md

Summary

Updated requiredKeyTags parameter with 6-item limit in four locations for Fraud Detector controls

Security assessment

Multiple documentation updates adding parameter limits without security context. Tag requirements relate to resource organization rather than security vulnerabilities.

Diff

diff --git a/securityhub/latest/userguide/frauddetector-controls.md b/securityhub/latest/userguide/frauddetector-controls.md
index cfef359b7..e48f3aa56 100644
--- a//securityhub/latest/userguide/frauddetector-controls.md
+++ b//securityhub/latest/userguide/frauddetector-controls.md
@@ -29 +29 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  | No default value   
@@ -74 +74 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  | No default value   
@@ -119 +119 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  | No default value   
@@ -164 +164 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  | No default value