AWS securityhub documentation change
Summary
Revised EC2.173 control title to clarify scope limited to Spot Fleet requests with launch parameters
Security assessment
Documentation improvement for accuracy of an existing security control. No evidence of addressing a specific security vulnerability.
Diff
diff --git a/securityhub/latest/userguide/controls-change-log.md b/securityhub/latest/userguide/controls-change-log.md index f3e45c762..06ab7980c 100644 --- a//securityhub/latest/userguide/controls-change-log.md +++ b//securityhub/latest/userguide/controls-change-log.md @@ -12,0 +13,2 @@ Date of change | Control ID and title | Description of change +July 24, 2025 | [[EKS.2] EKS clusters should run on a supported Kubernetes version](./eks-controls.html#eks-2) | This control checks whether an Amazon EKS cluster runs on a supported Kubernetes version. Security Hub CSPM changed the parameter value for this control from `1.30` to `1.31`. Standard support for Kubernetes version 1.30 in Amazon EKS ended on July 23, 2025. +July 23, 2025 | [[EC2.173] EC2 Spot Fleet requests with launch parameters should enable encryption for attached EBS volumes](./ec2-controls.html#ec2-173) | Security Hub CSPM changed the title of this control. The new title more accurately reflects that the control only checks Amazon EC2 Spot Fleet requests that specify launch parameters. Previously, the title of this control was: _EC2 Spot Fleet requests should enable encryption for attached EBS volumes_. @@ -15 +17 @@ June 30, 2025 | [[IAM.17] Ensure IAM password policy expires passwords within 90 -June 30, 2025 | [[RDS.16] Aurora DB clusters should be configured to copy tags to DB snapshots](./rds-controls.html#rds-16) | Security Hub CSPM changed the title of this control. The new title more accurately reflects that the control checks only Amazon Aurora DB clusters. Previously, the title of this control was: _RDS DB clusters should be configured to copy tags to snapshots_. +June 30, 2025 | [[RDS.16] Aurora DB clusters should be configured to copy tags to DB snapshots](./rds-controls.html#rds-16) | Security Hub CSPM changed the title of this control. The new title more accurately reflects that the control only checks Amazon Aurora DB clusters. Previously, the title of this control was: _RDS DB clusters should be configured to copy tags to snapshots_.