AWS securityhub documentation change

Service: securityhub · 2025-04-16 · Documentation low

File: securityhub/latest/userguide/iotwireless-controls.md

Summary

Added maximum limit of 6 items for requiredKeyTags parameter in multiple controls

Security assessment

Change adds enforcement for tag limits which supports security best practices, but no evidence of addressing a specific vulnerability

Diff

diff --git a/securityhub/latest/userguide/iotwireless-controls.md b/securityhub/latest/userguide/iotwireless-controls.md
index 6e76d56b4..6bd770c98 100644
--- a//securityhub/latest/userguide/iotwireless-controls.md
+++ b//securityhub/latest/userguide/iotwireless-controls.md
@@ -29 +29 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) |  No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  |  No default value   
@@ -59 +59 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) |  No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  |  No default value   
@@ -89 +89 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va
-`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList  | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) |  No default value   
+`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive.  | StringList (maximum of 6 items)  | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions).  |  No default value