AWS securityhub documentation change

Service: securityhub · 2025-04-16 · Documentation low

File: securityhub/latest/userguide/iam-controls.md

Summary

Updated requiredTagKeys parameter documentation in multiple IAM controls to specify a maximum of 6 items allowed

Security assessment

Documentation refinement for tag enforcement parameters in existing IAM controls, no evidence of security vulnerability remediation.

Diff

diff --git a/securityhub/latest/userguide/iam-controls.md b/securityhub/latest/userguide/iam-controls.md
index 3e2b3e8cd..91e5eebde 100644
--- a//securityhub/latest/userguide/iam-controls.md
+++ b//securityhub/latest/userguide/iam-controls.md
@@ -933 +933 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) |  `No default value`  
+`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  |  `No default value`  
@@ -963 +963 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) |  `No default value`  
+`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  |  `No default value`  
@@ -993 +993 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) |  `No default value`  
+`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  |  `No default value`