AWS controltower documentation change

Service: controltower · 2025-07-25 · Documentation low

File: controltower/latest/controlreference/security-hub-controls.md

Summary

Added deprecation notice for control SH.RDS.18 (RDS instances in VPC requirement)

Security assessment

Informational update about control lifecycle. Does not directly address vulnerabilities or add security features.

Diff

diff --git a/controltower/latest/controlreference/security-hub-controls.md b/controltower/latest/controlreference/security-hub-controls.md
index 304e0f23f..a4d68b552 100644
--- a//controltower/latest/controlreference/security-hub-controls.md
+++ b//controltower/latest/controlreference/security-hub-controls.md
@@ -39,0 +40,2 @@ The control named **[SH.S3.4] S3 buckets should have server-side encryption enab
+The control named **[SH.RDS.18] RDS instances should be deployed in a VPC** is deprecated, effective April 28, 2025, and is to be removed from the Control Catalog. 
+