AWS securityhub documentation change

Service: securityhub · 2025-05-10 · Documentation low

File: securityhub/latest/userguide/fsbp-standard.md

Summary

Added references to new DocumentDB.6 and multiple Redshift Serverless security controls in the FSBP standard

Security assessment

Adds documentation links for new security best practice controls (SSL enforcement, public access prevention, default credential avoidance). While security-related, there's no evidence these changes address specific active vulnerabilities.

Diff

diff --git a/securityhub/latest/userguide/fsbp-standard.md b/securityhub/latest/userguide/fsbp-standard.md
index 52bb8e72d..a2bb8ab7e 100644
--- a//securityhub/latest/userguide/fsbp-standard.md
+++ b//securityhub/latest/userguide/fsbp-standard.md
@@ -134,0 +135,2 @@ The controls include security best practices for resources from multiple AWS ser
+[[DocumentDB.6] Amazon DocumentDB clusters should be encrypted in transit](./documentdb-controls.html#documentdb-6)
+
@@ -531 +533 @@ The controls include security best practices for resources from multiple AWS ser
-[[RDS.46] RDS DB instances should not be deployed in public subnets with routes to internet gateways](./rds-controls.html#rds-46)
+[[RDS.44] RDS for MariaDB DB instances should be encrypted in transit](./rds-controls.html#rds-44)
@@ -554,0 +557,10 @@ The controls include security best practices for resources from multiple AWS ser
+[[RedshiftServerless.2] Connections to Redshift Serverless workgroups should be required to use SSL](./redshiftserverless-controls.html#redshiftserverless-2)
+
+[[RedshiftServerless.3] Redshift Serverless workgroups should prohibit public access](./redshiftserverless-controls.html#redshiftserverless-3)
+
+[[RedshiftServerless.5] Redshift Serverless namespaces should not use the default admin username](./redshiftserverless-controls.html#redshiftserverless-5)
+
+[[RedshiftServerless.6] Redshift Serverless namespaces should export logs to CloudWatch Logs](./redshiftserverless-controls.html#redshiftserverless-6)
+
+[[RedshiftServerless.7] Redshift Serverless namespaces should not use the default database name](./redshiftserverless-controls.html#redshiftserverless-7)
+