AWS config high security documentation change

Service: config · 2025-06-16 · Security-related high

File: config/latest/developerguide/managed-rules-by-evaluation-mode.md

Summary

Added same new managed rules as in 'managed-rules-by-aws-config.md'

Security assessment

Mirrors the security rule additions from the other file, expanding documentation for security controls across services.

Diff

diff --git a/config/latest/developerguide/managed-rules-by-evaluation-mode.md b/config/latest/developerguide/managed-rules-by-evaluation-mode.md
index 80203103b..556f3c788 100644
--- a//config/latest/developerguide/managed-rules-by-evaluation-mode.md
+++ b//config/latest/developerguide/managed-rules-by-evaluation-mode.md
@@ -299,0 +300,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [cloudfront-ssl-policy-check](./cloudfront-ssl-policy-check.html)
+
@@ -367,0 +370,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [cognito-identity-pool-unauth-access-check](./cognito-identity-pool-unauth-access-check.html)
+
@@ -479,0 +484,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [ec2-enis-source-destination-check-enabled](./ec2-enis-source-destination-check-enabled.html)
+
@@ -673,0 +680,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [elbv2-listener-encryption-in-transit](./elbv2-listener-encryption-in-transit.html)
+
@@ -899,0 +908,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [lambda-function-xray-enabled](./lambda-function-xray-enabled.html)
+
@@ -937,0 +948,4 @@ Currently, all AWS Config rules support detective evaluation.
+  * [msk-cluster-public-access-disabled](./msk-cluster-public-access-disabled.html)
+
+  * [msk-connect-connector-logging-enabled](./msk-connect-connector-logging-enabled.html)
+
@@ -941,0 +956,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [msk-unrestricted-access-check](./msk-unrestricted-access-check.html)
+
@@ -1085,0 +1102,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [redshift-cluster-multi-az-enabled](./redshift-cluster-multi-az-enabled.html)
+
@@ -1125,0 +1144,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [s3express-dir-bucket-lifecycle-rules-check](./s3express-dir-bucket-lifecycle-rules-check.html)
+
@@ -1243,0 +1264,4 @@ Currently, all AWS Config rules support detective evaluation.
+  * [ssm-automation-block-public-sharing](./ssm-automation-block-public-sharing.html)
+
+  * [ssm-automation-logging-enabled](./ssm-automation-logging-enabled.html)
+