AWS controltower documentation change
Summary
Updated list of non-deployable regions for numerous AWS Control Tower controls, adding ap-southeast-7 and mx-central-1 regions to multiple security-related controls. Expanded control coverage across services like ACM, API Gateway, CloudFront, IAM, KMS, WAF, and others.
Security assessment
The changes document regional availability limitations for security controls but do not indicate remediation of a specific vulnerability. The controls listed (e.g., encryption requirements, access controls, WAF configurations) are security-related features, making this documentation update about security capabilities.
Diff
diff --git a/controltower/latest/userguide/control-limitations.md b/controltower/latest/userguide/control-limitations.md index 0bb9131dc..678d61b5c 100644 --- a//controltower/latest/userguide/control-limitations.md +++ b//controltower/latest/userguide/control-limitations.md @@ -43 +43 @@ For information about AWS Security Hub controls from the **Service-Managed Stand -**Control identifier** | **Non-deployable Regions** +**Control identifier** | **Non-deployable regions** @@ -45,2 +45,235 @@ For information about AWS Security Hub controls from the **Service-Managed Stand -`CT.DAX.PR.2` | ap-southeast-5, ca-west-1, us-west-1 -`CT.REDSHIFT.PR.5` | ap-south-2, ap-southeast-3, ap-southeast-4, ca-west-1, eu-central-2, eu-south-2, il-central-1, me-central-1 +`CT.ACM.PR.1` | ap-southeast-7, mx-central-1 +`CT.APIGATEWAY.PR.1` | ap-southeast-7, mx-central-1 +`CT.APIGATEWAY.PR.2` | ap-southeast-7, mx-central-1 +`CT.APIGATEWAY.PR.3` | ap-southeast-7, mx-central-1 +`CT.APIGATEWAY.PR.4` | ap-southeast-7, mx-central-1 +`CT.APIGATEWAY.PR.5` | ap-southeast-7, mx-central-1 +`CT.APIGATEWAY.PR.6` | ap-southeast-7, mx-central-1 +`CT.APPSYNC.PR.1` | ap-southeast-7, mx-central-1 +`CT.APPSYNC.PR.2` | ap-southeast-7, mx-central-1 +`CT.APPSYNC.PR.3` | ap-southeast-7, mx-central-1 +`CT.APPSYNC.PR.4` | ap-southeast-7, mx-central-1 +`CT.APPSYNC.PR.5` | ap-southeast-7, mx-central-1 +`CT.ATHENA.PR.2` | ap-southeast-7, mx-central-1 +`CT.AUTOSCALING.PR.1` | ap-southeast-7, mx-central-1 +`CT.AUTOSCALING.PR.10` | ap-southeast-7, mx-central-1 +`CT.AUTOSCALING.PR.11` | ap-southeast-7, mx-central-1 +`CT.AUTOSCALING.PR.2` | ap-southeast-7, mx-central-1 +`CT.AUTOSCALING.PR.4` | ap-southeast-7, mx-central-1 +`CT.AUTOSCALING.PR.5` | ap-southeast-7, mx-central-1 +`CT.AUTOSCALING.PR.6` | ap-southeast-7, mx-central-1 +`CT.AUTOSCALING.PR.8` | ap-southeast-7, mx-central-1 +`CT.AUTOSCALING.PR.9` | ap-southeast-7, mx-central-1 +`CT.CLOUDFRONT.PR.1` | ap-southeast-7, mx-central-1 +`CT.CLOUDFRONT.PR.10` | ap-southeast-7, mx-central-1 +`CT.CLOUDFRONT.PR.11` | ap-southeast-7, mx-central-1 +`CT.CLOUDFRONT.PR.2` | ap-southeast-7, mx-central-1 +`CT.CLOUDFRONT.PR.3` | ap-southeast-7, mx-central-1 +`CT.CLOUDFRONT.PR.4` | ap-southeast-7, mx-central-1 +`CT.CLOUDFRONT.PR.5` | ap-southeast-7, mx-central-1 +`CT.CLOUDFRONT.PR.6` | ap-southeast-7, mx-central-1 +`CT.CLOUDFRONT.PR.7` | ap-southeast-7, mx-central-1 +`CT.CLOUDFRONT.PR.8` | ap-southeast-7, mx-central-1 +`CT.CLOUDFRONT.PR.9` | ap-southeast-7, mx-central-1 +`CT.CLOUDTRAIL.PR.1` | ap-southeast-7, mx-central-1 +`CT.CLOUDTRAIL.PR.2` | ap-southeast-7, mx-central-1 +`CT.CLOUDTRAIL.PR.3` | ap-southeast-7, mx-central-1 +`CT.CLOUDTRAIL.PR.4` | ap-southeast-7, mx-central-1 +`CT.CLOUDWATCH.PR.1` | ap-southeast-7, mx-central-1 +`CT.CLOUDWATCH.PR.2` | ap-southeast-7, mx-central-1 +`CT.CLOUDWATCH.PR.3` | ap-southeast-7, mx-central-1 +`CT.CLOUDWATCH.PR.4` | ap-southeast-7, mx-central-1 +`CT.CODEBUILD.PR.1` | ap-southeast-7, mx-central-1 +`CT.CODEBUILD.PR.2` | ap-southeast-7, mx-central-1 +`CT.CODEBUILD.PR.3` | ap-southeast-7, mx-central-1 +`CT.CODEBUILD.PR.5` | ap-southeast-7, mx-central-1 +`CT.CODEBUILD.PR.6` | ap-southeast-7, mx-central-1 +`CT.DAX.PR.1` | ap-southeast-7, mx-central-1 +`CT.DAX.PR.2` | ap-southeast-5, ca-west-1, us-west-1, ap-southeast-7, mx-central-1 +`CT.DAX.PR.3` | ap-southeast-7, mx-central-1 +`CT.DMS.PR.1` | ap-southeast-7, mx-central-1 +`CT.DMS.PR.2` | ap-southeast-7, mx-central-1 +`CT.DOCUMENTDB.PR.1` | ap-southeast-7, mx-central-1 +`CT.DOCUMENTDB.PR.2` | ap-southeast-7, mx-central-1 +`CT.DYNAMODB.PR.1` | ap-southeast-7, mx-central-1 +`CT.DYNAMODB.PR.2` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.1` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.10` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.11` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.12` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.13` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.14` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.15` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.16` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.17` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.18` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.19` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.2` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.20` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.3` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.4` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.5` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.6` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.7` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.8` | ap-southeast-7, mx-central-1 +`CT.EC2.PR.9` | ap-southeast-7, mx-central-1 +`CT.ECR.PR.1` | ap-southeast-7, mx-central-1 +`CT.ECR.PR.2` | ap-southeast-7, mx-central-1 +`CT.ECR.PR.3` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.1` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.10` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.11` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.12` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.2` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.3` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.4` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.5` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.6` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.7` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.8` | ap-southeast-7, mx-central-1 +`CT.ECS.PR.9` | ap-southeast-7, mx-central-1 +`CT.EKS.PR.1` | ap-southeast-7, mx-central-1 +`CT.EKS.PR.2` | ap-southeast-7, mx-central-1 +`CT.ELASTICACHE.PR.1` | ap-southeast-7, mx-central-1 +`CT.ELASTICACHE.PR.2` | ap-southeast-7, mx-central-1 +`CT.ELASTICACHE.PR.3` | ap-southeast-7, mx-central-1 +`CT.ELASTICACHE.PR.4` | ap-southeast-7, mx-central-1 +`CT.ELASTICACHE.PR.5` | ap-southeast-7, mx-central-1 +`CT.ELASTICACHE.PR.6` | ap-southeast-7, mx-central-1 +`CT.ELASTICACHE.PR.7` | ap-southeast-7, mx-central-1 +`CT.ELASTICACHE.PR.8` | ap-southeast-7, mx-central-1 +`CT.ELASTICBEANSTALK.PR.1` | ap-southeast-7, mx-central-1 +`CT.ELASTICBEANSTALK.PR.2` | ap-southeast-7, mx-central-1 +`CT.ELASTICBEANSTALK.PR.3` | ap-southeast-7, mx-central-1 +`CT.ELASTICFILESYSYSTEM.PR.1` | ap-southeast-7, mx-central-1 +`CT.ELASTICFILESYSYSTEM.PR.2` | ap-southeast-7, mx-central-1 +`CT.ELASTICFILESYSYSTEM.PR.3` | ap-southeast-7, mx-central-1 +`CT.ELASTICFILESYSYSTEM.PR.4` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.1` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.10` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.11` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.12` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.13` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.14` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.15` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.2` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.3` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.4` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.5` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.6` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.7` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.8` | ap-southeast-7, mx-central-1 +`CT.ELASTICLOADBALANCING.PR.9` | ap-southeast-7, mx-central-1 +`CT.EMR.PR.1` | ap-southeast-7, mx-central-1 +`CT.EMR.PR.2` | ap-southeast-7, mx-central-1 +`CT.EMR.PR.3` | ap-southeast-7, mx-central-1 +`CT.EMR.PR.4` | ap-southeast-7, mx-central-1 +`CT.GLUE.PR.1` | ap-southeast-7, mx-central-1 +`CT.GUARDDUTY.PR.1` | ap-southeast-7, mx-central-1 +`CT.IAM.PR.1` | ap-southeast-7, mx-central-1 +`CT.IAM.PR.2` | ap-southeast-7, mx-central-1 +`CT.IAM.PR.3` | ap-southeast-7, mx-central-1 +`CT.IAM.PR.4` | ap-southeast-7, mx-central-1 +`CT.IAM.PR.5` | ap-southeast-7, mx-central-1 +`CT.KINESIS.PR.1` | ap-southeast-7, mx-central-1 +`CT.KMS.PR.1` | ap-southeast-7, mx-central-1 +`CT.KMS.PR.2` | ap-southeast-7, mx-central-1 +`CT.KMS.PR.3` | ap-southeast-7, mx-central-1 +`CT.LAMBDA.PR.2` | ap-southeast-7, mx-central-1 +`CT.LAMBDA.PR.3` | ap-southeast-7, mx-central-1 +`CT.LAMBDA.PR.4` | ap-southeast-7, mx-central-1 +`CT.LAMBDA.PR.5` | ap-southeast-7, mx-central-1 +`CT.LAMBDA.PR.6` | ap-southeast-7, mx-central-1 +`CT.MQ.PR.1` | ap-southeast-7, mx-central-1 +`CT.MQ.PR.2` | ap-southeast-7, mx-central-1 +`CT.MSK.PR.1` | ap-southeast-7, mx-central-1 +`CT.MSK.PR.2` | ap-southeast-7, mx-central-1 +`CT.NEPTUNE.PR.1` | ap-southeast-7, mx-central-1 +`CT.NEPTUNE.PR.2` | ap-southeast-7, mx-central-1 +`CT.NEPTUNE.PR.3` | ap-southeast-7, mx-central-1 +`CT.NEPTUNE.PR.4` | ap-southeast-7, mx-central-1 +`CT.NEPTUNE.PR.5` | ap-southeast-7, mx-central-1 +`CT.NETWORK-FIREWALL.PR.1` | ap-southeast-7, mx-central-1 +`CT.NETWORK-FIREWALL.PR.2` | ap-southeast-7, mx-central-1 +`CT.NETWORK-FIREWALL.PR.3` | ap-southeast-7, mx-central-1 +`CT.NETWORK-FIREWALL.PR.4` | ap-southeast-7, mx-central-1 +`CT.NETWORK-FIREWALL.PR.5` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.1` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.10` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.11` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.12` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.13` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.14` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.15` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.16` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.2` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.3` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.4` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.5` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.6` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.7` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.8` | ap-southeast-7, mx-central-1 +`CT.OPENSEARCH.PR.9` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.1` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.10` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.11` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.12` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.13` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.14` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.15` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.16` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.17` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.18` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.19` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.2` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.20` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.21` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.22` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.23` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.24` | ap-southeast-7, mx-central-1 +`CT.RDS.PR.25` | ap-southeast-7, mx-central-1