AWS securityhub documentation change
Summary
Added maximum limit of 6 items for requiredKeyTags parameter in multiple controls
Security assessment
Documentation update enforces tag quantity constraints for resource management without citing specific security vulnerabilities
Diff
diff --git a/securityhub/latest/userguide/ivs-controls.md b/securityhub/latest/userguide/ivs-controls.md index 46dcc5c2f..5c10c9db2 100644 --- a//securityhub/latest/userguide/ivs-controls.md +++ b//securityhub/latest/userguide/ivs-controls.md @@ -29 +29 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value +`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | No default value @@ -59 +59 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value +`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | No default value @@ -89 +89 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | No default value +`requiredKeyTags` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | No default value