AWS awssupport medium security documentation change
Summary
Updated section header from singular 'check' to plural 'checks' and added new Amazon S3 Bucket Permissions check entry with updated alert criteria
Security assessment
The change adds documentation for a security check (Amazon S3 Bucket Permissions) and updates alert criteria to reflect security misconfiguration detection. S3 bucket permissions are a critical security aspect, and improved detection of misconfigured permissions directly relates to security posture improvement.
Diff
diff --git a/awssupport/latest/user/aws-trusted-advisor-change-log.md b/awssupport/latest/user/aws-trusted-advisor-change-log.md index d4d3f1d8c..2a7ffb828 100644 --- a//awssupport/latest/user/aws-trusted-advisor-change-log.md +++ b//awssupport/latest/user/aws-trusted-advisor-change-log.md @@ -5 +5 @@ -Updated check: Amazon EC2 instances with Ubuntu LTS end of standard support Updated checksNew and updated checksNew check - AWS STS global endpoint usage across AWS RegionsNew Cost Optimization Hub checksCloudFront specific checks revisedRevised checksDeprecated AWS Security Hub checksNew check: Amazon RDS Continuous Backup Not EnabledNew check: AWS CloudTrail Management Events LoggingUpdated the Auto Scaling Group Resources checkUpdated the IAM Access Analyzer External Access checkAdded 1 new checkUpdated 3 checksAdded 4 checksUpdated 3 checksAdded 9 new checksUpdated 1 Security check and added 1 Security checkUpdated 6 Security checksUpdated 1 fault tolerance checksUpdated 9 checksRemoved 5 checks and added 1 checkRemoved fault tolerance checksNew fault tolerance checkUpdated fault tolerance and security checksNew fault tolerance checkUpdated fault tolerance checkUpdated security checkNew security and performance checksNew security checkNew fault tolerance and cost optimization checksNew fault tolerance checksNew checks for Amazon RDSNew AWS Trusted Advisor APITrusted Advisor check removalIntegration of AWS Config checks into Trusted AdvisorNew fault tolerance checksNew service limits checkNew fault tolerance checkNew fault tolerance and performance checksNew fault tolerance checksNew fault tolerance checksRegion Expansion of Amazon ECS Fault Tolerance ChecksNew fault tolerance checksNew fault tolerance checksUpdates to the Trusted Advisor integration with AWS Security HubNew fault tolerance checks for AWS Resilience HubUpdate to the Trusted Advisor consoleNew checks for Amazon EC2Added Security Hub checks to Trusted AdvisorAdded checks from AWS Compute OptimizerUpdates to the Exposed Access Keys checkUpdated checks for AWS Direct ConnectAWS Security Hub controls added to the AWS Trusted Advisor consoleNew checks for Amazon EC2 and AWS Well-ArchitectedUpdated check name for Amazon OpenSearch ServiceAdded checks for Amazon Elastic Block Store volume storageAdded checks for AWS LambdaTrusted Advisor check removalUpdated checks for Amazon Elastic Block StoreTrusted Advisor check removalTrusted Advisor check removal +Updated checks: Updated checksNew and updated checksNew check - AWS STS global endpoint usage across AWS RegionsNew Cost Optimization Hub checksCloudFront specific checks revisedRevised checksDeprecated AWS Security Hub checksNew check: Amazon RDS Continuous Backup Not EnabledNew check: AWS CloudTrail Management Events LoggingUpdated the Auto Scaling Group Resources checkUpdated the IAM Access Analyzer External Access checkAdded 1 new checkUpdated 3 checksAdded 4 checksUpdated 3 checksAdded 9 new checksUpdated 1 Security check and added 1 Security checkUpdated 6 Security checksUpdated 1 fault tolerance checksUpdated 9 checksRemoved 5 checks and added 1 checkRemoved fault tolerance checksNew fault tolerance checkUpdated fault tolerance and security checksNew fault tolerance checkUpdated fault tolerance checkUpdated security checkNew security and performance checksNew security checkNew fault tolerance and cost optimization checksNew fault tolerance checksNew checks for Amazon RDSNew AWS Trusted Advisor APITrusted Advisor check removalIntegration of AWS Config checks into Trusted AdvisorNew fault tolerance checksNew service limits checkNew fault tolerance checkNew fault tolerance and performance checksNew fault tolerance checksNew fault tolerance checksRegion Expansion of Amazon ECS Fault Tolerance ChecksNew fault tolerance checksNew fault tolerance checksUpdates to the Trusted Advisor integration with AWS Security HubNew fault tolerance checks for AWS Resilience HubUpdate to the Trusted Advisor consoleNew checks for Amazon EC2Added Security Hub checks to Trusted AdvisorAdded checks from AWS Compute OptimizerUpdates to the Exposed Access Keys checkUpdated checks for AWS Direct ConnectAWS Security Hub controls added to the AWS Trusted Advisor consoleNew checks for Amazon EC2 and AWS Well-ArchitectedUpdated check name for Amazon OpenSearch ServiceAdded checks for Amazon Elastic Block Store volume storageAdded checks for AWS LambdaTrusted Advisor check removalUpdated checks for Amazon Elastic Block StoreTrusted Advisor check removalTrusted Advisor check removal @@ -17 +17 @@ For more information about the available checks, see the [AWS Trusted Advisor ch -## Updated check: Amazon EC2 instances with Ubuntu LTS end of standard support +## Updated checks: @@ -19 +19 @@ For more information about the available checks, see the [AWS Trusted Advisor ch -The following check was updated: +The following checks were updated: @@ -22,0 +23 @@ Check name | Check ID | Description +[Amazon S3 Bucket Permissions](./security-checks.html#amazon-s3-bucket-permissions) | `Pfx0RwqBli` | The **Alert criteria** is updated to reflect all Yellow and Red criteria.