AWS securityhub documentation change
Summary
Added maximum item limit (6) for requiredKeyTags parameter in multiple control configurations
Security assessment
The change clarifies operational limits for tag enforcement without evidence of addressing a specific security vulnerability. It improves documentation of security-related tagging controls but doesn't reference any patched issue.
Diff
diff --git a/securityhub/latest/userguide/iotevents-controls.md b/securityhub/latest/userguide/iotevents-controls.md index 0bd0ed6f9..bcba67aae 100644 --- a//securityhub/latest/userguide/iotevents-controls.md +++ b//securityhub/latest/userguide/iotevents-controls.md @@ -29 +29 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value +`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | No default value @@ -59 +59 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value +`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | No default value @@ -89 +89 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value +`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | No default value