AWS config documentation change
Summary
Added Asia Pacific (Taipei) region support and listed 63 new security-focused Config rules available in that region
Security assessment
While the added rules include security best practices (encryption, access controls, logging), the change itself is regional availability documentation expansion rather than addressing a specific security vulnerability. The update improves awareness of security controls in a new region but doesn't fix existing security flaws.
Diff
diff --git a/config/latest/developerguide/managing-rules-by-region-availability.md b/config/latest/developerguide/managing-rules-by-region-availability.md index ac331031c..e4a266e9c 100644 --- a//config/latest/developerguide/managing-rules-by-region-availability.md +++ b//config/latest/developerguide/managing-rules-by-region-availability.md @@ -5 +5 @@ -US East (Ohio)US East (N. Virginia)US West (N. California)US West (Oregon)Africa (Cape Town)Asia Pacific (Hong Kong)Asia Pacific (Hyderabad)Asia Pacific (Jakarta)Asia Pacific (Malaysia)Asia Pacific (Melbourne)Asia Pacific (Mumbai)Asia Pacific (Osaka)Asia Pacific (Seoul)Asia Pacific (Singapore)Asia Pacific (Sydney)Asia Pacific (Thailand)Asia Pacific (Tokyo)Canada (Central)Canada West (Calgary)China (Beijing)China (Ningxia)Europe (Frankfurt)Europe (Ireland)Europe (London)Europe (Milan)Europe (Paris)Europe (Spain)Europe (Stockholm)Europe (Zurich)Israel (Tel Aviv)Mexico (Central)Middle East (Bahrain)Middle East (UAE)South America (São Paulo)AWS GovCloud (US-East)AWS GovCloud (US-West) +US East (Ohio)US East (N. Virginia)US West (N. California)US West (Oregon)Africa (Cape Town)Asia Pacific (Hong Kong)Asia Pacific (Hyderabad)Asia Pacific (Jakarta)Asia Pacific (Malaysia)Asia Pacific (Melbourne)Asia Pacific (Mumbai)Asia Pacific (Osaka)Asia Pacific (Seoul)Asia Pacific (Singapore)Asia Pacific (Sydney)Asia Pacific (Taipei)Asia Pacific (Thailand)Asia Pacific (Tokyo)Canada (Central)Canada West (Calgary)China (Beijing)China (Ningxia)Europe (Frankfurt)Europe (Ireland)Europe (London)Europe (Milan)Europe (Paris)Europe (Spain)Europe (Stockholm)Europe (Zurich)Israel (Tel Aviv)Mexico (Central)Middle East (Bahrain)Middle East (UAE)South America (São Paulo)AWS GovCloud (US-East)AWS GovCloud (US-West) @@ -14965,0 +14966,163 @@ AWS Config currently supports the following managed rules. Before using these ru +## Asia Pacific (Taipei) Region + + * [acm-certificate-expiration-check](./acm-certificate-expiration-check.html) + + * [alb-http-drop-invalid-header-enabled](./alb-http-drop-invalid-header-enabled.html) + + * [alb-http-to-https-redirection-check](./alb-http-to-https-redirection-check.html) + + * [alb-waf-enabled](./alb-waf-enabled.html) + + * [approved-amis-by-id](./approved-amis-by-id.html) + + * [approved-amis-by-tag](./approved-amis-by-tag.html) + + * [aurora-mysql-backtracking-enabled](./aurora-mysql-backtracking-enabled.html) + + * [cloudformation-stack-drift-detection-check](./cloudformation-stack-drift-detection-check.html) + + * [cloudtrail-security-trail-enabled](./cloudtrail-security-trail-enabled.html) + + * [cloudwatch-alarm-action-check](./cloudwatch-alarm-action-check.html) + + * [cloudwatch-alarm-resource-check](./cloudwatch-alarm-resource-check.html) + + * [cloudwatch-alarm-settings-check](./cloudwatch-alarm-settings-check.html) + + * [cloud-trail-cloud-watch-logs-enabled](./cloud-trail-cloud-watch-logs-enabled.html) + + * [cloud-trail-enabled](./cloud-trail-enabled.html) + + * [cloud-trail-encryption-enabled](./cloud-trail-encryption-enabled.html) + + * [cloud-trail-log-file-validation-enabled](./cloud-trail-log-file-validation-enabled.html) + + * [cmk-backing-key-rotation-enabled](./cmk-backing-key-rotation-enabled.html) + + * [cw-loggroup-retention-period-check](./cw-loggroup-retention-period-check.html) + + * [db-instance-backup-enabled](./db-instance-backup-enabled.html) + + * [desired-instance-tenancy](./desired-instance-tenancy.html) + + * [desired-instance-type](./desired-instance-type.html) + + * [dynamodb-autoscaling-enabled](./dynamodb-autoscaling-enabled.html) + + * [dynamodb-pitr-enabled](./dynamodb-pitr-enabled.html) + + * [dynamodb-table-encryption-enabled](./dynamodb-table-encryption-enabled.html) + + * [ebs-snapshot-public-restorable-check](./ebs-snapshot-public-restorable-check.html) + + * [ec2-ebs-encryption-by-default](./ec2-ebs-encryption-by-default.html) + + * [ec2-imdsv2-check](./ec2-imdsv2-check.html) + + * [ec2-instance-detailed-monitoring-enabled](./ec2-instance-detailed-monitoring-enabled.html) + + * [ec2-instance-multiple-eni-check](./ec2-instance-multiple-eni-check.html) + + * [ec2-instance-no-public-ip](./ec2-instance-no-public-ip.html) + + * [ec2-stopped-instance](./ec2-stopped-instance.html) + + * [eip-attached](./eip-attached.html) + + * [elb-acm-certificate-required](./elb-acm-certificate-required.html) + + * [elb-cross-zone-load-balancing-enabled](./elb-cross-zone-load-balancing-enabled.html) + + * [elb-deletion-protection-enabled](./elb-deletion-protection-enabled.html) + + * [elb-logging-enabled](./elb-logging-enabled.html) + + * [elb-predefined-security-policy-ssl-check](./elb-predefined-security-policy-ssl-check.html) + + * [elb-tls-https-listeners-only](./elb-tls-https-listeners-only.html) + + * [encrypted-volumes](./encrypted-volumes.html) + + * [incoming-ssh-disabled](./incoming-ssh-disabled.html) + + * [instances-in-vpc](./instances-in-vpc.html) + + * [lambda-function-public-access-prohibited](./lambda-function-public-access-prohibited.html) + + * [lambda-function-settings-check](./lambda-function-settings-check.html) + + * [lambda-inside-vpc](./lambda-inside-vpc.html) + + * [multi-region-cloud-trail-enabled](./multi-region-cloud-trail-enabled.html) + + * [rds-automatic-minor-version-upgrade-enabled](./rds-automatic-minor-version-upgrade-enabled.html) + + * [rds-cluster-deletion-protection-enabled](./rds-cluster-deletion-protection-enabled.html) + + * [rds-cluster-iam-authentication-enabled](./rds-cluster-iam-authentication-enabled.html) + + * [rds-cluster-multi-az-enabled](./rds-cluster-multi-az-enabled.html) + + * [rds-enhanced-monitoring-enabled](./rds-enhanced-monitoring-enabled.html) + + * [rds-instance-deletion-protection-enabled](./rds-instance-deletion-protection-enabled.html) + + * [rds-instance-iam-authentication-enabled](./rds-instance-iam-authentication-enabled.html) + + * [rds-instance-public-access-check](./rds-instance-public-access-check.html) + + * [rds-logging-enabled](./rds-logging-enabled.html) + + * [rds-multi-az-support](./rds-multi-az-support.html) + + * [rds-snapshots-public-prohibited](./rds-snapshots-public-prohibited.html) + + * [rds-snapshot-encrypted](./rds-snapshot-encrypted.html) + + * [rds-storage-encrypted](./rds-storage-encrypted.html) + + * [required-tags](./required-tags.html) + + * [restricted-incoming-traffic](./restricted-incoming-traffic.html) + + * [s3-account-level-public-access-blocks-periodic](./s3-account-level-public-access-blocks-periodic.html) + + * [s3-bucket-blacklisted-actions-prohibited](./s3-bucket-blacklisted-actions-prohibited.html) + + * [s3-bucket-default-lock-enabled](./s3-bucket-default-lock-enabled.html) + + * [s3-bucket-level-public-access-prohibited](./s3-bucket-level-public-access-prohibited.html) + + * [s3-bucket-logging-enabled](./s3-bucket-logging-enabled.html) + + * [s3-bucket-public-read-prohibited](./s3-bucket-public-read-prohibited.html) + + * [s3-bucket-public-write-prohibited](./s3-bucket-public-write-prohibited.html) + + * [s3-bucket-replication-enabled](./s3-bucket-replication-enabled.html) + + * [s3-bucket-server-side-encryption-enabled](./s3-bucket-server-side-encryption-enabled.html) + + * [s3-bucket-ssl-requests-only](./s3-bucket-ssl-requests-only.html) + + * [s3-bucket-versioning-enabled](./s3-bucket-versioning-enabled.html) + + * [service-vpc-endpoint-enabled](./service-vpc-endpoint-enabled.html) + + * [sns-encrypted-kms](./sns-encrypted-kms.html) + + * [subnet-auto-assign-public-ip-disabled](./subnet-auto-assign-public-ip-disabled.html) + + * [vpc-default-security-group-closed](./vpc-default-security-group-closed.html) + + * [vpc-flow-logs-enabled](./vpc-flow-logs-enabled.html) + + * [vpc-network-acl-unused-check](./vpc-network-acl-unused-check.html) + + * [vpc-sg-open-only-to-authorized-ports](./vpc-sg-open-only-to-authorized-ports.html) + + * [vpc-vpn-2-tunnels-up](./vpc-vpn-2-tunnels-up.html) + + + +