AWS securityhub documentation change
Summary
Adjusted RDS.16 control title to specify Aurora DB clusters instead of generic RDS clusters
Security assessment
Clarification of control scope for better documentation accuracy. No indication of security vulnerability remediation.
Diff
diff --git a/securityhub/latest/userguide/controls-change-log.md b/securityhub/latest/userguide/controls-change-log.md index f3e45c762..06ab7980c 100644 --- a//securityhub/latest/userguide/controls-change-log.md +++ b//securityhub/latest/userguide/controls-change-log.md @@ -12,0 +13,2 @@ Date of change | Control ID and title | Description of change +July 24, 2025 | [[EKS.2] EKS clusters should run on a supported Kubernetes version](./eks-controls.html#eks-2) | This control checks whether an Amazon EKS cluster runs on a supported Kubernetes version. Security Hub CSPM changed the parameter value for this control from `1.30` to `1.31`. Standard support for Kubernetes version 1.30 in Amazon EKS ended on July 23, 2025. +July 23, 2025 | [[EC2.173] EC2 Spot Fleet requests with launch parameters should enable encryption for attached EBS volumes](./ec2-controls.html#ec2-173) | Security Hub CSPM changed the title of this control. The new title more accurately reflects that the control only checks Amazon EC2 Spot Fleet requests that specify launch parameters. Previously, the title of this control was: _EC2 Spot Fleet requests should enable encryption for attached EBS volumes_. @@ -15 +17 @@ June 30, 2025 | [[IAM.17] Ensure IAM password policy expires passwords within 90 -June 30, 2025 | [[RDS.16] Aurora DB clusters should be configured to copy tags to DB snapshots](./rds-controls.html#rds-16) | Security Hub CSPM changed the title of this control. The new title more accurately reflects that the control checks only Amazon Aurora DB clusters. Previously, the title of this control was: _RDS DB clusters should be configured to copy tags to snapshots_. +June 30, 2025 | [[RDS.16] Aurora DB clusters should be configured to copy tags to DB snapshots](./rds-controls.html#rds-16) | Security Hub CSPM changed the title of this control. The new title more accurately reflects that the control only checks Amazon Aurora DB clusters. Previously, the title of this control was: _RDS DB clusters should be configured to copy tags to snapshots_.