AWS securityhub documentation change
Summary
Updated parameter documentation for 'requiredTagKeys' to specify maximum of 6 items in StringList type and allowed values
Security assessment
Clarifies tag enforcement limits but does not address a specific security vulnerability. Tag management is a security best practice.
Diff
diff --git a/securityhub/latest/userguide/networkfirewall-controls.md b/securityhub/latest/userguide/networkfirewall-controls.md index c9a9afd99..5839b832e 100644 --- a//securityhub/latest/userguide/networkfirewall-controls.md +++ b//securityhub/latest/userguide/networkfirewall-controls.md @@ -200 +200 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | `No default value` +`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | `No default value` @@ -230 +230 @@ Parameter | Description | Type | Allowed custom values | Security Hub default va -`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList | List of tags that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions) | `No default value` +`requiredTagKeys` | List of non-system tag keys that the evaluated resource must contain. Tag keys are case sensitive. | StringList (maximum of 6 items) | 1–6 tag keys that meet [AWS requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions). | `No default value`