AWS config documentation change
Summary
Added multiple new managed rules to AWS Config documentation (e.g., alb-tagged, appsync-graphql-api-xray-enabled, datasync-location-object-storage-using-https)
Security assessment
Added documentation for new security-related rules like 'datasync-location-object-storage-using-https' (enforces HTTPS) and other resource tagging rules. While some rules enhance security posture, there is no evidence these changes address specific vulnerabilities.
Diff
diff --git a/config/latest/developerguide/managed-rules-by-aws-config.md b/config/latest/developerguide/managed-rules-by-aws-config.md index 3e0bbf153..bffb5cfa7 100644 --- a//config/latest/developerguide/managed-rules-by-aws-config.md +++ b//config/latest/developerguide/managed-rules-by-aws-config.md @@ -34,0 +35,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [alb-tagged](./alb-tagged.html) + @@ -58,0 +61,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [api-gw-rest-api-tagged](./api-gw-rest-api-tagged.html) + @@ -60,0 +65,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [api-gw-stage-tagged](./api-gw-stage-tagged.html) + @@ -140,0 +147,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [appsync-graphql-api-xray-enabled](./appsync-graphql-api-xray-enabled.html) + @@ -234,0 +243,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [cloudfront-origin-lambda-url-oac-enabled](./cloudfront-origin-lambda-url-oac-enabled.html) + @@ -270,0 +281,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [cloudwatch-metric-stream-tagged](./cloudwatch-metric-stream-tagged.html) + @@ -294,0 +307,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [codebuild-report-group-tagged](./codebuild-report-group-tagged.html) + @@ -330,0 +345,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [datasync-location-object-storage-using-https](./datasync-location-object-storage-using-https.html) + @@ -512,0 +529,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [ec2-vpn-connection-tagged](./ec2-vpn-connection-tagged.html) + @@ -524,0 +543,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [ecs-capacity-provider-tagged](./ecs-capacity-provider-tagged.html) + @@ -556,0 +577,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [efs-file-system-tagged](./efs-file-system-tagged.html) + @@ -570,0 +593,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [eks-addon-tagged](./eks-addon-tagged.html) + @@ -638,0 +663,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [elb-internal-scheme-check](./elb-internal-scheme-check.html) + @@ -642,0 +669,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [elb-tagged](./elb-tagged.html) + @@ -708,0 +737,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [glb-tagged](./glb-tagged.html) + @@ -792,0 +823,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [iotdevicedefender-custom-metric-tagged](./iotdevicedefender-custom-metric-tagged.html) + @@ -826,0 +859,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [iot-job-template-tagged](./iot-job-template-tagged.html) + @@ -844,0 +879,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [kms-key-tagged](./kms-key-tagged.html) + @@ -894,0 +931,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [msk-cluster-tagged](./msk-cluster-tagged.html) + @@ -948,0 +987,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [nlb-tagged](./nlb-tagged.html) + @@ -994,0 +1035,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [rds-event-subscription-tagged](./rds-event-subscription-tagged.html) + @@ -1018,0 +1061,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [rds-option-group-tagged](./rds-option-group-tagged.html) + @@ -1086,0 +1131,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [route53-health-check-tagged](./route53-health-check-tagged.html) + + * [route53-hosted-zone-tagged](./route53-hosted-zone-tagged.html) + @@ -1190,0 +1239,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [service-catalog-portfolio-tagged](./service-catalog-portfolio-tagged.html) + @@ -1206,0 +1257,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sqs-queue-dlq-check](./sqs-queue-dlq-check.html) + @@ -1208,0 +1261,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sqs-queue-policy-full-access-check](./sqs-queue-policy-full-access-check.html) + @@ -1216,0 +1271,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [stepfunctions-state-machine-tagged](./stepfunctions-state-machine-tagged.html) + @@ -1290,0 +1347,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [workspaces-connection-alias-tagged](./workspaces-connection-alias-tagged.html) + @@ -1294,0 +1353,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [workspaces-workspace-tagged](./workspaces-workspace-tagged.html) +