AWS config documentation change
Summary
Added resource types for security services (Macie, Security Hub), EC2 security controls, and S3 StorageLensGroup
Security assessment
Expands documentation for security-focused AWS services (e.g., Macie, Security Hub) but does not resolve a specific security issue.
Diff
diff --git a/config/latest/developerguide/resource-config-reference.md b/config/latest/developerguide/resource-config-reference.md index 02e291bcd..56b16ce6f 100644 --- a//config/latest/developerguide/resource-config-reference.md +++ b//config/latest/developerguide/resource-config-reference.md @@ -5 +5 @@ -Amazon AppStreamAmazon AppFlowAmazon API GatewayAmazon AthenaAmazon CloudFrontAmazon CloudWatchAmazon CodeGuruAmazon CognitoAmazon ConnectAmazon DetectiveAmazon DynamoDBAmazon EC2Amazon ECRAmazon ECSAmazon EFSAmazon EKSAmazon EMRAmazon EventBridgeAmazon ForecastAmazon Fraud DetectorAmazon GuardDutyAmazon InspectorAmazon IVSAmazon KeyspacesAmazon OpenSearch ServiceAmazon PersonalizeAmazon PinpointAmazon QLDBAmazon KendraAmazon KinesisAmazon LexAmazon LightsailAmazon Lookout for MetricsAmazon Lookout for VisionAmazon Managed GrafanaAmazon Managed Service for PrometheusAmazon MemoryDBAmazon MQAmazon MSKAmazon RedshiftAmazon QuickSightAmazon RDSAmazon Route 53Amazon SageMaker AIAmazon SESAmazon SNSAmazon SQSAmazon S3Amazon WorkSpacesAWS AmplifyAWS AppConfigAWS App RunnerAWS App MeshAWS AppSyncAWS Audit ManagerAWS Auto ScalingAWS BackupAWS BatchAWS BudgetsAWS Certificate ManagerAWS CloudFormationAWS CloudTrailAWS Cloud9AWS Cloud MapAWS CodeArtifactAWS CodeBuildAWS CodeDeployAWS CodePipelineAWS ConfigAWS DMSAWS DataSyncAWS Device FarmAWS Elastic BeanstalkAWS FISAWS Global AcceleratorAWS GlueAWS Ground StationAWS HealthLakeAWS IAMAWS IoTAWS KMSAWS LambdaAWS Mainframe ModernizationAWS Network FirewallAWS Network ManagerAWS PanoramaAWS Private CAAWS Resilience HubAWS Resource ExplorerAWS RoboMakerAWS SignerAWS Secrets ManagerAWS Service CatalogAWS ShieldAWS Step FunctionsAWS Systems ManagerAWS Transfer FamilyAWS WAFAWS X-RayElastic Load BalancingMediaConnectMediaPackageMediaTailor +Amazon AppStreamAmazon AppFlowAmazon API GatewayAmazon AthenaAmazon CloudFrontAmazon CloudWatchAmazon CodeGuruAmazon CognitoAmazon ConnectAmazon DetectiveAmazon DynamoDBAmazon EC2Amazon ECRAmazon ECSAmazon EFSAmazon EKSAmazon EMRAmazon EventBridgeAmazon ForecastAmazon Fraud DetectorAmazon GuardDutyAmazon InspectorAmazon IVSAmazon KeyspacesAmazon OpenSearch ServiceAmazon PersonalizeAmazon PinpointAmazon QLDBAmazon KendraAmazon KinesisAmazon LexAmazon LightsailAmazon Lookout for MetricsAmazon Lookout for VisionAmazon MacieAmazon Managed GrafanaAmazon Managed Service for PrometheusAmazon MemoryDBAmazon MQAmazon MSKAmazon QuickSightAmazon RedshiftAmazon RDSAmazon Route 53Amazon SageMaker AIAmazon SESAmazon SNSAmazon SQSAmazon S3Amazon WorkSpacesAWS AmplifyAWS AppConfigAWS App RunnerAWS App MeshAWS AppSyncAWS Audit ManagerAWS Auto ScalingAWS BackupAWS BatchAWS BudgetsAWS Certificate ManagerAWS CloudFormationAWS CloudTrailAWS Cloud9AWS Cloud MapAWS CodeArtifactAWS CodeBuildAWS CodeDeployAWS CodePipelineAWS ConfigAWS DMSAWS DataSyncAWS Device FarmAWS Elastic BeanstalkAWS FISAWS Global AcceleratorAWS GlueAWS Ground StationAWS HealthLakeAWS IAMAWS IoTAWS KMSAWS LambdaAWS Mainframe ModernizationAWS Network FirewallAWS Network ManagerAWS PanoramaAWS Private CAAWS Resilience HubAWS Resource ExplorerAWS RoboMakerAWS SignerAWS Secrets ManagerAWS Security HubAWS Service CatalogAWS ShieldAWS Step FunctionsAWS Systems ManagerAWS Transfer FamilyAWS WAFAWS X-RayElastic Load BalancingMediaConnectMediaPackageMediaTailor @@ -59,0 +60 @@ Amazon AppIntegrations | `AWS::AppIntegrations::EventIntegration` | NA | NA +`AWS::AppIntegrations::Application` | NA | NA @@ -234,0 +236,4 @@ is contained in | Route table +`AWS::EC2::EIPAssociation` | NA | NA +`AWS::EC2::InstanceConnectEndpoint` | NA | NA +`AWS::EC2::SnapshotBlockPublicAccess` | NA | NA +`AWS::EC2::VPCEndpointConnectionNotification` | NA | NA @@ -337,0 +343 @@ Amazon Inspector | `AWS::InspectorV2::Filter ` | NA | NA +`AWS::InspectorV2::Activation` | NA | NA @@ -362 +368,2 @@ Amazon OpenSearch Service | `AWS::OpenSearch::Domain` | NA | NA -Amazon OpenSearch Service Serverless | `AWS::OpenSearchServerless::VpcEndpoint` | NA | NA +Amazon OpenSearch Serverless | `AWS::OpenSearchServerless::VpcEndpoint` | NA | NA +`AWS::OpenSearchServerless::Collection` | NA | NA @@ -442,0 +450,6 @@ Amazon Lookout for Vision | `AWS::LookoutVision::Project` | NA | NA +## Amazon Macie + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +Amazon Macie | `AWS::Macie::Session` | NA | NA + @@ -477,0 +491,8 @@ Amazon Managed Streaming for Apache Kafka Connect | `AWS::KafkaConnect::Connecto +## Amazon QuickSight + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +Amazon QuickSight | `AWS::QuickSight::DataSource` | NA | NA +`AWS::QuickSight::Template` | NA | NA +`AWS::QuickSight::Theme` | NA | NA + @@ -498,9 +518,0 @@ Virtual private cloud (VPC) -## Amazon QuickSight - -AWS Service | Resource Type Value | Relationship | Related Resource ----|---|---|--- -Amazon QuickSight | `AWS::QuickSight::Dashboard` | NA | NA -`AWS::QuickSight::DataSource` | NA | NA -`AWS::QuickSight::Template` | NA | NA -`AWS::QuickSight::Theme` | NA | NA - @@ -533,0 +546 @@ Amazon Route 53 | `AWS::Route53::HostedZone` | NA | NA +Amazon Route 53 Profiles | `AWS::Route53Profiles::Profile` | NA | NA @@ -564,0 +578 @@ Amazon SageMaker AI | `AWS::SageMaker::CodeRepository` | NA | NA +`AWS::SageMaker::InferenceExperiment` | NA | NA @@ -596,0 +611 @@ Amazon Simple Storage Service | `AWS::S3::Bucket*` | NA | NA +`AWS::S3::StorageLensGroup` | NA | NA @@ -972 +986,0 @@ is contained in | EC2 subnet -`AWS::Lambda::Alias` | NA | NA @@ -1051,0 +1066,6 @@ is associated with | KMS Key +## AWS Security Hub + +AWS Service | Resource Type Value | Relationship | Related Resource +---|---|---|--- +AWS Security Hub | `AWS::SecurityHub::Standard` | NA | NA +