AWS securityhub documentation change
Summary
Added entries about reverting ElastiCache.1 control changes and updating CloudFront.1 control scope
Security assessment
Documents version history of security controls but shows routine maintenance rather than vulnerability fixes. The ElastiCache revert suggests previous documentation errors rather than security issues.
Diff
diff --git a/securityhub/latest/userguide/controls-change-log.md b/securityhub/latest/userguide/controls-change-log.md index 1b0632dc7..9d9248212 100644 --- a//securityhub/latest/userguide/controls-change-log.md +++ b//securityhub/latest/userguide/controls-change-log.md @@ -12,0 +13,2 @@ Date of change | Control ID and title | Description of change +October 23, 2025 | [[ElastiCache.1] ElastiCache (Redis OSS) clusters should have automatic backups enabled](./elasticache-controls.html#elasticache-1) | Security Hub CSPM reverted the changes that were made to the title, description, and rule for this control on October 14, 2025. +October 22, 2025 | [[CloudFront.1] CloudFront distributions should have a default root object configured](./cloudfront-controls.html#cloudfront-1) | Security Hub CSPM updated this control to not generate findings for Amazon CloudFront distributions that use custom origins. @@ -14 +16 @@ October 16, 2025 | [[CloudFront.15] CloudFront distributions should use the reco -October 14, 2025 | [[ElastiCache.1] ElastiCache (Valkey and Redis OSS) clusters should have automatic backups enabled](./elasticache-controls.html#elasticache-1) | Security Hub CSPM changed the title, description, and rule for this control. Previously, the control checked Redis OSS clusters and all replication groups, using the [elasticache-redis-cluster-automatic-backup-check](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-redis-cluster-automatic-backup-check.html) rule. The title of the control was: _ElastiCache (Redis OSS) clusters should have automatic backups enabled_. This control now checks Valkey clusters in addition to Redis OSS clusters and all replication groups, using the [elasticache-automatic-backup-check-enabled](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-automatic-backup-check-enabled.html) rule. The new title and description reflect that the control checks both types of clusters. +October 14, 2025 | [[ElastiCache.1] ElastiCache (Redis OSS) clusters should have automatic backups enabled](./elasticache-controls.html#elasticache-1) | Security Hub CSPM changed the title, description, and rule for this control. Previously, the control checked Redis OSS clusters and all replication groups, using the [elasticache-redis-cluster-automatic-backup-check](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-redis-cluster-automatic-backup-check.html) rule. The title of the control was: _ElastiCache (Redis OSS) clusters should have automatic backups enabled_. This control now checks Valkey clusters in addition to Redis OSS clusters and all replication groups, using the [elasticache-automatic-backup-check-enabled](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-automatic-backup-check-enabled.html) rule. The new title and description reflect that the control checks both types of clusters.