AWS securityhub documentation change
Summary
Added new Lambda.2 runtime support, updated AutoScaling control titles, and retired AutoScaling.4 control
Security assessment
The Lambda.2 update adds documentation for new supported runtimes (security best practice), but does not address a specific vulnerability. Title changes and control retirement are administrative updates. Security documentation is added for runtime support, but no direct security issue is resolved.
Diff
diff --git a/securityhub/latest/userguide/controls-change-log.md b/securityhub/latest/userguide/controls-change-log.md index 1b11e557e..c0911f3a5 100644 --- a//securityhub/latest/userguide/controls-change-log.md +++ b//securityhub/latest/userguide/controls-change-log.md @@ -12,0 +13 @@ Date of change | Control ID and title | Description of change +November 21, 2025 | [[Lambda.2] Lambda functions should use supported runtimes](./lambda-controls.html#lambda-2) | This control checks whether the runtime settings for an AWS Lambda function match expected values for supported runtimes in each language. Security Hub CSPM now supports `nodejs24.x` and `python3.14` as parameter values for this control. AWS Lambda added support for these runtimes. @@ -69 +70 @@ April 30, 2024 | [[CloudTrail.3] At least one CloudTrail trail should be enabled -April 29, 2024 | [[AutoScaling.1] Auto Scaling groups associated with a load balancer should use ELB health checks](./autoscaling-controls.html#autoscaling-1) | Changed control title from **Auto Scaling groups associated with a Classic Load Balancer should use load balancer health checks** to **Auto Scaling groups associated with a load balancer should use ELB health checks**. This control currently evaluates Application, Gateway, Network, and Classic Load Balancers. The title and description have been changed to accurately reflect the current behavior. +April 29, 2024 | [[AutoScaling.1] Amazon EC2 Auto Scaling groups associated with a load balancer should use ELB health checks](./autoscaling-controls.html#autoscaling-1) | Changed control title from **Amazon EC2 Auto Scaling groups associated with a Classic Load Balancer should use load balancer health checks** to **Amazon EC2 Auto Scaling groups associated with a load balancer should use ELB health checks**. This control currently evaluates Application, Gateway, Network, and Classic Load Balancers. The title and description have been changed to accurately reflect the current behavior. @@ -72 +73 @@ April 10, 2024 | [Athena.1] Athena workgroups should be encrypted at rest | Sec -April 10, 2024 | [AutoScaling.4] Auto Scaling group launch configuration should not have a metadata response hop limit greater than 1 | Security Hub CSPM retired this control and removed it from all standards. Metadata response hop limits for Amazon Elastic Compute Cloud (Amazon EC2) instances are workload dependent. +April 10, 2024 | [AutoScaling.4] Amazon EC2 Auto Scaling group launch configuration should not have a metadata response hop limit greater than 1 | Security Hub CSPM retired this control and removed it from all standards. Metadata response hop limits for Amazon Elastic Compute Cloud (Amazon EC2) instances are workload dependent.