AWS Security ChangesHomeSearch

AWS securityhub documentation change

Service: securityhub · 2025-05-31 · Documentation low

File: securityhub/latest/userguide/acm-controls.md

Summary

Updated title, formatting changes, added NIST.800-171.r2 3.13.15 compliance reference, and removed backticks from AWS Config rule links

Security assessment

Added a new NIST 800-171 compliance reference and improved documentation structure. While this enhances security documentation completeness, there is no evidence of addressing a specific security vulnerability.

Diff

diff --git a/securityhub/latest/userguide/acm-controls.md b/securityhub/latest/userguide/acm-controls.md
index bcffdbd95..86570f78d 100644
--- a//securityhub/latest/userguide/acm-controls.md
+++ b//securityhub/latest/userguide/acm-controls.md
@@ -7 +7 @@
-# Security Hub controls for ACM
+# Security Hub controls for AWS Certificate Manager
@@ -9,3 +9 @@
-These Security Hub controls evaluate the AWS Certificate Manager (ACM) service and resources.
-
-These controls may not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support).
+These AWS Security Hub controls evaluate the AWS Certificate Manager (ACM) service and resources. The controls might not be available in all AWS Regions. For more information, see [Availability of controls by Region](./securityhub-regions.html#securityhub-regions-control-support).
@@ -15 +13 @@ These controls may not be available in all AWS Regions. For more information, se
-**Related requirements:** NIST.800-53.r5 SC-28(3), NIST.800-53.r5 SC-7(16), PCI DSS v4.0.1/4.2.1
+**Related requirements:** NIST.800-53.r5 SC-28(3), NIST.800-53.r5 SC-7(16), NIST.800-171.r2 3.13.15, PCI DSS v4.0.1/4.2.1
@@ -23 +21 @@ These controls may not be available in all AWS Regions. For more information, se
-**AWS Config rule:** [`acm-certificate-expiration-check`](https://docs.aws.amazon.com/config/latest/developerguide/acm-certificate-expiration-check.html)
+**AWS Config rule:** [acm-certificate-expiration-check](https://docs.aws.amazon.com/config/latest/developerguide/acm-certificate-expiration-check.html)
@@ -67 +65 @@ For more information, see [Renewal for domains validated by DNS](https://docs.aw
-**AWS Config rule:** [`acm-certificate-rsa-check`](https://docs.aws.amazon.com/config/latest/developerguide/acm-certificate-rsa-check.html)
+**AWS Config rule:** [acm-certificate-rsa-check](https://docs.aws.amazon.com/config/latest/developerguide/acm-certificate-rsa-check.html)