AWS config medium security documentation change
Summary
Added new managed rules including security-focused checks like sqs-queue-policy-full-access-check and cloudfront-origin-lambda-url-oac-enabled
Security assessment
Added multiple security-focused managed rules that enforce security best practices (e.g., checking SQS policies, HTTPS usage, and resource tagging). These help prevent misconfigurations that could lead to security vulnerabilities.
Diff
diff --git a/config/latest/developerguide/DocumentHistory.md b/config/latest/developerguide/DocumentHistory.md index dc1c6e532..f7fc44a89 100644 --- a//config/latest/developerguide/DocumentHistory.md +++ b//config/latest/developerguide/DocumentHistory.md @@ -13 +13 @@ The following table describes the important changes to the documentation for AWS - * Latest documentation update: July 28, 2025 + * Latest documentation update: August 15, 2025 @@ -19,0 +20,39 @@ Change| Description| Date +AWS Config supports new resource types| With this release, you can use AWS Config to record configuration changes to new AWS Backup, Amazon OpenSearch Service, Amazon EC2, Amazon Managed Streaming for Apache Kafka, Amazon Redshift, Route 53 Profiles, AWS Systems Manager Incident Manager, AWS Transfer Family, and Amazon CloudFront resource types. For more information, see [Supported resource types](https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html).| August 15, 2025 +AWS Config updates managed rules| With this release, AWS Config supports the following managed rules: + + * [cloudfront-origin-lambda-url-oac-enabled](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-origin-lambda-url-oac-enabled.html) + * [sqs-queue-policy-full-access-check](https://docs.aws.amazon.com/config/latest/developerguide/sqs-queue-policy-full-access-check.html) + * [sqs-queue-dlq-check](https://docs.aws.amazon.com/config/latest/developerguide/sqs-queue-dlq-check.html) + +| August 14, 2025 +AWS Config updates managed rules| With this release, AWS Config supports the following managed rules: + + * [alb-tagged](https://docs.aws.amazon.com/config/latest/developerguide/alb-tagged.html) + * [api-gw-rest-api-tagged](https://docs.aws.amazon.com/config/latest/developerguide/api-gw-rest-api-tagged.html) + * [api-gw-stage-tagged](https://docs.aws.amazon.com/config/latest/developerguide/api-gw-stage-tagged.html) + * [appsync-graphql-api-xray-enabled](https://docs.aws.amazon.com/config/latest/developerguide/appsync-graphql-api-xray-enabled.html) + * [cloudwatch-metric-stream-tagged](https://docs.aws.amazon.com/config/latest/developerguide/cloudwatch-metric-stream-tagged.html) + * [codebuild-report-group-tagged](https://docs.aws.amazon.com/config/latest/developerguide/codebuild-report-group-tagged.html) + * [datasync-location-object-storage-using-https](https://docs.aws.amazon.com/config/latest/developerguide/datasync-location-object-storage-using-https.html) + * [ec2-vpn-connection-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ec2-vpn-connection-tagged.html) + * [ecs-capacity-provider-tagged](https://docs.aws.amazon.com/config/latest/developerguide/ecs-capacity-provider-tagged.html) + * [efs-file-system-tagged](https://docs.aws.amazon.com/config/latest/developerguide/efs-file-system-tagged.html) + * [eks-addon-tagged](https://docs.aws.amazon.com/config/latest/developerguide/eks-addon-tagged.html) + * [elb-internal-scheme-check](https://docs.aws.amazon.com/config/latest/developerguide/elb-internal-scheme-check.html) + * [elb-tagged](https://docs.aws.amazon.com/config/latest/developerguide/elb-tagged.html) + * [glb-tagged](https://docs.aws.amazon.com/config/latest/developerguide/glb-tagged.html) + * [iot-job-template-tagged](https://docs.aws.amazon.com/config/latest/developerguide/iot-job-template-tagged.html) + * [iotdevicedefender-custom-metric-tagged](https://docs.aws.amazon.com/config/latest/developerguide/iotdevicedefender-custom-metric-tagged.html) + * [kms-key-tagged](https://docs.aws.amazon.com/config/latest/developerguide/kms-key-tagged.html) + * [msk-cluster-tagged](https://docs.aws.amazon.com/config/latest/developerguide/msk-cluster-tagged.html) + * [nlb-tagged](https://docs.aws.amazon.com/config/latest/developerguide/nlb-tagged.html) + * [rds-event-subscription-tagged](https://docs.aws.amazon.com/config/latest/developerguide/rds-event-subscription-tagged.html) + * [rds-option-group-tagged](https://docs.aws.amazon.com/config/latest/developerguide/rds-option-group-tagged.html) + * [route53-health-check-tagged](https://docs.aws.amazon.com/config/latest/developerguide/route53-health-check-tagged.html) + * [route53-hosted-zone-tagged](https://docs.aws.amazon.com/config/latest/developerguide/route53-hosted-zone-tagged.html) + * [service-catalog-portfolio-tagged](https://docs.aws.amazon.com/config/latest/developerguide/service-catalog-portfolio-tagged.html) + * [stepfunctions-state-machine-tagged](https://docs.aws.amazon.com/config/latest/developerguide/stepfunctions-state-machine-tagged.html) + * [workspaces-connection-alias-tagged](https://docs.aws.amazon.com/config/latest/developerguide/workspaces-connection-alias-tagged.html) + * [workspaces-workspace-tagged](https://docs.aws.amazon.com/config/latest/developerguide/workspaces-workspace-tagged.html) + +| August 13, 2025