AWS awssupport documentation change
Summary
Updated documentation to list deprecated Trusted Advisor checks (AWS CloudTrail Logging and S3 Bucket Logging), changed terminology from 'removed' to 'deprecated', and reorganized check categories
Security assessment
The change documents deprecation of security-focused checks (CloudTrail/S3 logging) but does not address a specific vulnerability. This update helps users maintain security posture by alerting them to check deprecations, though it doesn't fix security flaws.
Diff
diff --git a/awssupport/latest/user/aws-trusted-advisor-change-log.md b/awssupport/latest/user/aws-trusted-advisor-change-log.md index 2a7ffb828..25c13bd2e 100644 --- a//awssupport/latest/user/aws-trusted-advisor-change-log.md +++ b//awssupport/latest/user/aws-trusted-advisor-change-log.md @@ -5 +5 @@ -Updated checks: Updated checksNew and updated checksNew check - AWS STS global endpoint usage across AWS RegionsNew Cost Optimization Hub checksCloudFront specific checks revisedRevised checksDeprecated AWS Security Hub checksNew check: Amazon RDS Continuous Backup Not EnabledNew check: AWS CloudTrail Management Events LoggingUpdated the Auto Scaling Group Resources checkUpdated the IAM Access Analyzer External Access checkAdded 1 new checkUpdated 3 checksAdded 4 checksUpdated 3 checksAdded 9 new checksUpdated 1 Security check and added 1 Security checkUpdated 6 Security checksUpdated 1 fault tolerance checksUpdated 9 checksRemoved 5 checks and added 1 checkRemoved fault tolerance checksNew fault tolerance checkUpdated fault tolerance and security checksNew fault tolerance checkUpdated fault tolerance checkUpdated security checkNew security and performance checksNew security checkNew fault tolerance and cost optimization checksNew fault tolerance checksNew checks for Amazon RDSNew AWS Trusted Advisor APITrusted Advisor check removalIntegration of AWS Config checks into Trusted AdvisorNew fault tolerance checksNew service limits checkNew fault tolerance checkNew fault tolerance and performance checksNew fault tolerance checksNew fault tolerance checksRegion Expansion of Amazon ECS Fault Tolerance ChecksNew fault tolerance checksNew fault tolerance checksUpdates to the Trusted Advisor integration with AWS Security HubNew fault tolerance checks for AWS Resilience HubUpdate to the Trusted Advisor consoleNew checks for Amazon EC2Added Security Hub checks to Trusted AdvisorAdded checks from AWS Compute OptimizerUpdates to the Exposed Access Keys checkUpdated checks for AWS Direct ConnectAWS Security Hub controls added to the AWS Trusted Advisor consoleNew checks for Amazon EC2 and AWS Well-ArchitectedUpdated check name for Amazon OpenSearch ServiceAdded checks for Amazon Elastic Block Store volume storageAdded checks for AWS LambdaTrusted Advisor check removalUpdated checks for Amazon Elastic Block StoreTrusted Advisor check removalTrusted Advisor check removal +Deprecated checks Updated checks Updated checksNew and updated checksNew check - AWS STS global endpoint usage across AWS RegionsNew Cost Optimization Hub checksCloudFront specific checks revisedRevised checksDeprecated AWS Security Hub checksNew check: Amazon RDS Continuous Backup Not EnabledNew check: AWS CloudTrail Management Events LoggingUpdated the Auto Scaling Group Resources checkUpdated the IAM Access Analyzer External Access checkAdded 1 new checkUpdated 3 checksAdded 4 checksUpdated 3 checksAdded 9 new checksUpdated 1 Security check and added 1 Security checkUpdated 6 Security checksUpdated 1 fault tolerance checksUpdated 9 checksRemoved 5 checks and added 1 checkRemoved fault tolerance checksNew fault tolerance checkUpdated fault tolerance and security checksNew fault tolerance checkUpdated fault tolerance checkUpdated security checkNew security and performance checksNew security checkNew fault tolerance and cost optimization checksNew fault tolerance checksNew checks for Amazon RDSNew AWS Trusted Advisor APITrusted Advisor check removalIntegration of AWS Config checks into Trusted AdvisorNew fault tolerance checksNew service limits checkNew fault tolerance checkNew fault tolerance and performance checksNew fault tolerance checksNew fault tolerance checksRegion Expansion of Amazon ECS Fault Tolerance ChecksNew fault tolerance checksNew fault tolerance checksUpdates to the Trusted Advisor integration with AWS Security HubNew fault tolerance checks for AWS Resilience HubUpdate to the Trusted Advisor consoleNew checks for Amazon EC2Added Security Hub checks to Trusted AdvisorAdded checks from AWS Compute OptimizerUpdates to the Exposed Access Keys checkUpdated checks for AWS Direct ConnectAWS Security Hub controls added to the AWS Trusted Advisor consoleNew checks for Amazon EC2 and AWS Well-ArchitectedUpdated check name for Amazon OpenSearch ServiceAdded checks for Amazon Elastic Block Store volume storageAdded checks for AWS LambdaTrusted Advisor check removalUpdated checks for Amazon Elastic Block StoreTrusted Advisor check removalTrusted Advisor check removal @@ -13 +13 @@ See the following topic for recent changes to Trusted Advisor checks. -If you use the Trusted Advisor console or the AWS Support API, checks that were removed won't appear in check results. If you use a removed check, such as specifying the check ID in an AWS Support API operation or your code, then you receive API call errors. Remove these checks to avoid errors. +If you use the Trusted Advisor console or the AWS Support API, deprecated won't appear in check results. If you use a deprecated check, such as specifying the check ID in an AWS Support API operation or your code, then you receive API call errors. Remove these checks to avoid errors. @@ -17 +17,10 @@ For more information about the available checks, see the [AWS Trusted Advisor ch -## Updated checks: +## Deprecated checks + +The following checks were deprecated: + +Check name | Check ID | Description +---|---|--- +AWS CloudTrail Logging | `vjafUGJ9H0` | Deprecated check +Amazon S3 Bucket Logging | `BueAdJ7NrP` | Deprecated check + +## Updated checks