AWS config documentation change

Service: config · 2025-05-03 · Documentation low

File: config/latest/developerguide/what-is-resource-config-coverage.md

Summary

Updated resource configuration coverage table with additions/modifications for multiple AWS services including EC2 security features, Network Firewall, Security Hub, Inspector, and Macie

Security assessment

Changes document coverage status updates for security-adjacent services (e.g., EC2::SnapshotBlockPublicAccess, NetworkFirewall resources, SecurityHub::Standard) but do not indicate fixes for specific vulnerabilities. The updates primarily reflect expanded monitoring capabilities rather than addressing disclosed security issues.

Diff

diff --git a/config/latest/developerguide/what-is-resource-config-coverage.md b/config/latest/developerguide/what-is-resource-config-coverage.md
index 7fd35d29e..4bc6c4a08 100644
--- a//config/latest/developerguide/what-is-resource-config-coverage.md
+++ b//config/latest/developerguide/what-is-resource-config-coverage.md
@@ -31,0 +32 @@ AWS::AppFlow::Flow |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  No  |  Yes
+AWS::AppIntegrations::Application |  No  |  Yes  |  No  |  No  |  No  |  Yes  |  Yes  |  No   
@@ -124,0 +126 @@ AWS::EC2::EIP |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes
+AWS::EC2::EIPAssociation |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -133,0 +136 @@ AWS::EC2::Instance |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Ye
+AWS::EC2::InstanceConnectEndpoint |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
@@ -146,0 +150 @@ AWS::EC2::SecurityGroup |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes
+AWS::EC2::SnapshotBlockPublicAccess |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -161,0 +166 @@ AWS::EC2::VPCEndpoint |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |
+AWS::EC2::VPCEndpointConnectionNotification |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -183,0 +189 @@ AWS::EMR::SecurityConfiguration |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes
+AWS::ElastiCache::UserGroup |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
@@ -242,0 +249 @@ AWS::ImageBuilder::InfrastructureConfiguration |  Yes  |  Yes  |  Yes  |  Yes  |
+AWS::InspectorV2::Activation |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  No  |  Yes   
@@ -303,0 +311 @@ AWS::MSK::VpcConnection |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  No  |
+AWS::Macie::Session |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  No  |  Yes   
@@ -312,5 +320,5 @@ AWS::MemoryDB::SubnetGroup |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  No
-AWS::NetworkFirewall::Firewall |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
-AWS::NetworkFirewall::FirewallPolicy |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
-AWS::NetworkFirewall::RuleGroup |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
-AWS::NetworkFirewall::TLSInspectionConfiguration |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
-AWS::NetworkFirewall::VpcEndpointAssociation |  No  |  No  |  No  |  No  |  Yes  |  No  |  No  |  No   
+AWS::NetworkFirewall::Firewall |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
+AWS::NetworkFirewall::FirewallPolicy |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
+AWS::NetworkFirewall::RuleGroup |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
+AWS::NetworkFirewall::TLSInspectionConfiguration |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
+AWS::NetworkFirewall::VpcEndpointAssociation |  No  |  No  |  No  |  No  |  Yes  |  No  |  Yes  |  No   
@@ -325,0 +334 @@ AWS::OpenSearch::Domain |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  No  |
+AWS::OpenSearchServerless::Collection |  No  |  Yes  |  No  |  Yes  |  No  |  Yes  |  No  |  Yes   
@@ -370,0 +380 @@ AWS::Route53::HostedZone |  No  |  Yes  |  No  |  No  |  No  |  No  |  No  |  No
+AWS::Route53Profiles::Profile |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -391,0 +402 @@ AWS::S3::StorageLens |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  No  |  Ye
+AWS::S3::StorageLensGroup |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes   
@@ -411,0 +423 @@ AWS::SageMaker::Image |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  No  |  Y
+AWS::SageMaker::InferenceExperiment |  Yes  |  Yes  |  No  |  Yes  |  No  |  Yes  |  Yes  |  Yes   
@@ -416,0 +429 @@ AWS::SecretsManager::Secret |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Y
+AWS::SecurityHub::Standard |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -473,0 +487 @@ AWS::AppFlow::Flow |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  No  |  No  |  No
+AWS::AppIntegrations::Application |  No  |  Yes  |  Yes  |  No  |  No  |  No  |  No  |  No   
@@ -560,0 +575 @@ AWS::EC2::EIP |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes
+AWS::EC2::EIPAssociation |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -569,0 +585 @@ AWS::EC2::Instance |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Ye
+AWS::EC2::InstanceConnectEndpoint |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -582,0 +599 @@ AWS::EC2::SecurityGroup |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes
+AWS::EC2::SnapshotBlockPublicAccess |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -597,0 +615 @@ AWS::EC2::VPCEndpoint |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |
+AWS::EC2::VPCEndpointConnectionNotification |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -618,0 +637 @@ AWS::EMR::SecurityConfiguration |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes
+AWS::ElastiCache::UserGroup |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -669,0 +689 @@ AWS::ImageBuilder::InfrastructureConfiguration |  Yes  |  Yes  |  Yes  |  Yes  |
+AWS::InspectorV2::Activation |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
@@ -730,0 +751 @@ AWS::MSK::VpcConnection |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes
+AWS::Macie::Session |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  No   
@@ -743,0 +765 @@ AWS::OpenSearch::Domain |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |
+AWS::OpenSearchServerless::Collection |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  No  |  No  |  No   
@@ -786,0 +809 @@ AWS::RoboMaker::SimulationApplication |  Yes  |  Yes  |  No  |  No  |  No  |  No
+AWS::Route53Profiles::Profile |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -798,0 +822 @@ AWS::S3::StorageLens |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  No  |  No
+AWS::S3::StorageLensGroup |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  No  |  No   
@@ -818,0 +843 @@ AWS::SageMaker::Image |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |
+AWS::SageMaker::InferenceExperiment |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  No   
@@ -823,0 +849 @@ AWS::SecretsManager::Secret |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Y
+AWS::SecurityHub::Standard |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -875,0 +902 @@ AWS::AppFlow::Flow |  No  |  No  |  No  |  No  |  No  |  Yes  |  No  |  Yes  |
+AWS::AppIntegrations::Application |  No  |  No  |  No  |  No  |  No  |  No  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -962,0 +990 @@ AWS::EC2::EIP |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |
+AWS::EC2::EIPAssociation |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -971,0 +1000 @@ AWS::EC2::Instance |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Ye
+AWS::EC2::InstanceConnectEndpoint |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
@@ -984,0 +1014 @@ AWS::EC2::SecurityGroup |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes
+AWS::EC2::SnapshotBlockPublicAccess |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -999,0 +1030 @@ AWS::EC2::VPCEndpoint |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |
+AWS::EC2::VPCEndpointConnectionNotification |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1020,0 +1052 @@ AWS::EMR::SecurityConfiguration |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  Yes  |
+AWS::ElastiCache::UserGroup |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
@@ -1072,0 +1105 @@ AWS::ImageBuilder::InfrastructureConfiguration |  Yes  |  Yes  |  Yes  |  No  |
+AWS::InspectorV2::Activation |  Yes  |  No  |  Yes  |  No  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
@@ -1133,0 +1167 @@ AWS::MSK::VpcConnection |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |
+AWS::Macie::Session |  Yes  |  No  |  No  |  No  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
@@ -1142,5 +1176,5 @@ AWS::MemoryDB::SubnetGroup |  Yes  |  No  |  No  |  No  |  No  |  Yes  |  No  |
-AWS::NetworkFirewall::Firewall |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
-AWS::NetworkFirewall::FirewallPolicy |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
-AWS::NetworkFirewall::RuleGroup |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
-AWS::NetworkFirewall::TLSInspectionConfiguration |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
-AWS::NetworkFirewall::VpcEndpointAssociation |  No  |  No  |  No  |  Yes  |  No  |  No  |  No  |  No  |  No  |  No  |  No  |  No   
+AWS::NetworkFirewall::Firewall |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
+AWS::NetworkFirewall::FirewallPolicy |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
+AWS::NetworkFirewall::RuleGroup |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
+AWS::NetworkFirewall::TLSInspectionConfiguration |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
+AWS::NetworkFirewall::VpcEndpointAssociation |  No  |  No  |  No  |  Yes  |  No  |  No  |  No  |  No  |  No  |  No  |  Yes  |  No   
@@ -1147,0 +1182 @@ AWS::OpenSearch::Domain |  Yes  |  No  |  Yes  |  No  |  No  |  Yes  |  Yes  |
+AWS::OpenSearchServerless::Collection |  No  |  No  |  No  |  No  |  No  |  Yes  |  No  |  No  |  Yes  |  Yes  |  No  |  Yes   
@@ -1190,0 +1226 @@ AWS::RoboMaker::SimulationApplication |  No  |  No  |  No  |  No  |  No  |  No
+AWS::Route53Profiles::Profile |  Yes  |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1202,0 +1239 @@ AWS::S3::StorageLens |  No  |  No  |  No  |  No  |  No  |  Yes  |  No  |  Yes  |
+AWS::S3::StorageLensGroup |  No  |  No  |  No  |  No  |  No  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1222,0 +1260 @@ AWS::SageMaker::Image |  Yes  |  No  |  Yes  |  No  |  No  |  Yes  |  Yes  |  Ye
+AWS::SageMaker::InferenceExperiment |  Yes  |  No  |  No  |  No  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1227,0 +1266 @@ AWS::SecretsManager::Secret |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Y
+AWS::SecurityHub::Standard |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1317,0 +1357 @@ AWS::EC2::EIP |  Yes  |  Yes
+AWS::EC2::EIPAssociation |  Yes  |  Yes   
@@ -1328,0 +1369 @@ AWS::EC2::SecurityGroup |  Yes  |  Yes
+AWS::EC2::SnapshotBlockPublicAccess |  Yes  |  Yes   
@@ -1343,0 +1385 @@ AWS::EC2::VPCEndpoint |  Yes  |  Yes
+AWS::EC2::VPCEndpointConnectionNotification |  Yes  |  Yes   
@@ -1360,0 +1403 @@ AWS::EMR::SecurityConfiguration |  Yes  |  Yes
+AWS::ElastiCache::UserGroup |  Yes  |  Yes   
@@ -1389,0 +1433 @@ AWS::ImageBuilder::InfrastructureConfiguration |  Yes  |  Yes
+AWS::InspectorV2::Activation |  Yes  |  Yes   
@@ -1460,0 +1505 @@ AWS::S3::Bucket |  Yes  |  Yes
+AWS::S3::StorageLensGroup |  Yes  |  Yes   
@@ -1480,0 +1526 @@ AWS::SecretsManager::Secret |  Yes  |  Yes
+AWS::SecurityHub::Standard |  Yes  |  Yes   
@@ -1527,0 +1574 @@ AWS::AppFlow::Flow |  Yes  |  No  |  No  |  No
+AWS::AppIntegrations::Application |  Yes  |  No  |  No  |  No   
@@ -1603,0 +1651 @@ AWS::EC2::EIP |  Yes  |  Yes  |  Yes  |  Yes
+AWS::EC2::EIPAssociation |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1612,0 +1661 @@ AWS::EC2::Instance |  Yes  |  Yes  |  Yes  |  Yes
+AWS::EC2::InstanceConnectEndpoint |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1624,0 +1674 @@ AWS::EC2::SecurityGroup |  Yes  |  Yes  |  Yes  |  Yes
+AWS::EC2::SnapshotBlockPublicAccess |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1639,0 +1690 @@ AWS::EC2::VPCEndpoint |  Yes  |  Yes  |  Yes  |  Yes
+AWS::EC2::VPCEndpointConnectionNotification |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1660,0 +1712 @@ AWS::EMR::SecurityConfiguration |  Yes  |  Yes  |  Yes  |  Yes
+AWS::ElastiCache::UserGroup |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1696,0 +1749 @@ AWS::ImageBuilder::InfrastructureConfiguration |  Yes  |  Yes  |  Yes  |  Yes
+AWS::InspectorV2::Activation |  Yes  |  No  |  Yes  |  No   
@@ -1726,0 +1780 @@ AWS::MSK::VpcConnection |  Yes  |  Yes  |  Yes  |  Yes
+AWS::Macie::Session |  Yes  |  Yes  |  Yes  |  No   
@@ -1756,0 +1811 @@ AWS::ResourceExplorer2::Index |  No  |  No  |  Yes  |  Yes
+AWS::Route53Profiles::Profile |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1783,0 +1839 @@ AWS::SageMaker::Image |  Yes  |  Yes  |  Yes  |  Yes
+AWS::SageMaker::InferenceExperiment |  Yes  |  No  |  Yes  |  No   
@@ -1787,0 +1844 @@ AWS::SecretsManager::Secret |  Yes  |  Yes  |  Yes  |  Yes
+AWS::SecurityHub::Standard |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1899,0 +1957 @@ AWS::EC2::Instance |  Yes  |  Yes
+AWS::EC2::InstanceConnectEndpoint |  Yes  |  Yes   
@@ -1907,0 +1966 @@ AWS::EC2::SecurityGroup |  Yes  |  Yes
+AWS::EC2::SnapshotBlockPublicAccess |  Yes  |  Yes   
@@ -1922,0 +1982 @@ AWS::EC2::VPCEndpoint |  Yes  |  Yes
+AWS::EC2::VPCEndpointConnectionNotification |  Yes  |  Yes   
@@ -1940,0 +2001 @@ AWS::EMR::SecurityConfiguration |  Yes  |  Yes
+AWS::ElastiCache::UserGroup |  Yes  |  Yes   
@@ -1971,0 +2033 @@ AWS::ImageBuilder::InfrastructureConfiguration |  Yes  |  Yes
+AWS::InspectorV2::Activation |  Yes  |  Yes   
@@ -2044,0 +2107 @@ AWS::RoboMaker::SimulationApplication |  Yes  |  No
+AWS::Route53Profiles::Profile |  Yes  |  Yes   
@@ -2069,0 +2133 @@ AWS::SecretsManager::Secret |  Yes  |  Yes
+AWS::SecurityHub::Standard |  Yes  |  Yes