AWS securityhub documentation change

Service: securityhub · 2025-07-16 · Documentation low

File: securityhub/latest/userguide/controls-config-resources.md

Summary

Updated resource mappings for multiple services to include new security controls (e.g., CloudFront.15, Cognito.2, EC2.180)

Security assessment

The changes list new security controls but do not directly describe security vulnerabilities or remediation steps. This is an administrative update to reflect available controls rather than addressing a specific security issue.

Diff

diff --git a/securityhub/latest/userguide/controls-config-resources.md b/securityhub/latest/userguide/controls-config-resources.md
index 16dec72ce..fe0822536 100644
--- a//securityhub/latest/userguide/controls-config-resources.md
+++ b//securityhub/latest/userguide/controls-config-resources.md
@@ -70 +70 @@ AWS CloudFormation | `AWS::CloudFormation::Stack` |  CloudFormation.2
-Amazon CloudFront  | `AWS::CloudFront::Distribution` |  CloudFront.1 CloudFront.3 CloudFront.4 CloudFront.5 CloudFront.6 CloudFront.7 CloudFront.8 CloudFront.9 CloudFront.10 CloudFront.13 CloudFront.14  
+Amazon CloudFront  | `AWS::CloudFront::Distribution` |  CloudFront.1 CloudFront.3 CloudFront.4 CloudFront.5 CloudFront.6 CloudFront.7 CloudFront.8 CloudFront.9 CloudFront.10 CloudFront.13 CloudFront.14 CloudFront.15  
@@ -78 +78,2 @@ Amazon CodeGuru Reviewer | `AWS::CodeGuruReviewer::RepositoryAssociation` | Code
-Amazon Cognito | `AWS::Cognito::UserPool` | Cognito.1  
+Amazon Cognito | `AWS::Cognito::IdentityPool` | Cognito.2  
+`AWS::Cognito::UserPool` | Cognito.1  
@@ -100 +101 @@ Amazon Elastic Compute Cloud (EC2) | `AWS::EC2::ClientVpnEndpoint` |  EC2.51
-`AWS::EC2::NetworkInterface` |  EC2.22 EC2.35  
+`AWS::EC2::NetworkInterface` |  EC2.22 EC2.35 EC2.180  
@@ -136 +137 @@ Elastic Load Balancing | `AWS::ElasticLoadBalancing::LoadBalancer` |  ELB.2 ELB.
-`AWS::ElasticLoadBalancingV2::Listener` | ELB.17  
+`AWS::ElasticLoadBalancingV2::Listener` |  ELB.17 ELB.18  
@@ -185,3 +186,3 @@ AWS Key Management Service (AWS KMS) | `AWS::KMS::Alias` |  S3.17
-AWS Lambda | `AWS::Lambda::Function` |  Lambda.1 Lambda.2 Lambda.3 Lambda.5 Lambda.6  
-Amazon MSK | `AWS::MSK::Cluster` |  MSK.1 MSK.2  
-`AWS::KafkaConnect::Connector` |  MSK.3  
+AWS Lambda | `AWS::Lambda::Function` |  Lambda.1 Lambda.2 Lambda.3 Lambda.5 Lambda.6 Lambda.7  
+Amazon MSK | `AWS::MSK::Cluster` |  MSK.1 MSK.2 MSK.4 MSK.6  
+`AWS::KafkaConnect::Connector` |  MSK.3 MSK.5  
@@ -201 +202 @@ Amazon Relational Database Service (Amazon RDS) | `AWS::RDS::DBCluster` |  Docum
-Amazon Redshift | `AWS::Redshift::Cluster` |  Redshift.1 Redshift.2 Redshift.3 Redshift.4 Redshift.6 Redshift.7 Redshift.8 Redshift.9 Redshift.10 Redshift.11  
+Amazon Redshift | `AWS::Redshift::Cluster` |  Redshift.1 Redshift.2 Redshift.3 Redshift.4 Redshift.6 Redshift.7 Redshift.8 Redshift.9 Redshift.10 Redshift.11 Redshift.18  
@@ -211,0 +213 @@ Amazon Simple Storage Service (Amazon S3) | `AWS::S3::AccessPoint` |  S3.19
+`AWS::S3Express::DirectoryBucket` |  S3.25  
@@ -253 +255 @@ AWS CodeBuild |  `AWS::CodeBuild::Project`, `AWS::CodeBuild::ReportGroup`
-Amazon Cognito |  `AWS::Cognito::UserPool`  
+Amazon Cognito |  `AWS::Cognito::IdentityPool`, `AWS::Cognito::UserPool`  
@@ -281 +283 @@ Amazon Route 53 |  `AWS::Route53::HostedZone`
-Amazon Simple Storage Service (Amazon S3) |  `AWS::S3::AccessPoint`, `AWS::S3::AccountPublicAccessBlock`, `AWS::S3::Bucket`, `AWS::S3::MultiRegionAccessPoint`  
+Amazon Simple Storage Service (Amazon S3) |  `AWS::S3::AccessPoint`, `AWS::S3::AccountPublicAccessBlock`, `AWS::S3::Bucket`, `AWS::S3::MultiRegionAccessPoint`, `AWS::S3Express::DirectoryBucket`