AWS securityhub documentation change
Summary
Added two new changelog entries: 1) Updated guidance for AWS Control Tower standard, 2) Announcement of seven new FSBP security controls (Cognito.4-6, EC2.182, CloudFormation.3, ECS.18, SES.3).
Security assessment
Documents newly added security controls which are proactive security features, not fixes for existing vulnerabilities. No evidence of incident response.
Diff
diff --git a/securityhub/latest/userguide/doc-history.md b/securityhub/latest/userguide/doc-history.md index f1d34d28b..60db8ec6a 100644 --- a//securityhub/latest/userguide/doc-history.md +++ b//securityhub/latest/userguide/doc-history.md @@ -12,0 +13,2 @@ Change| Description| Date +Updated content for Service-Managed Standard: AWS Control Tower| Updated content for [Service-Managed Standard: AWS Control Tower](https://docs.aws.amazon.com/securityhub/latest/userguide/service-managed-standard-aws-control-tower.html) to provide improved guidance for creating, viewing and disabling controls in the standard from AWS Control Tower. | December 8, 2025 +New security controls| Security Hub CSPM released seven new controls for the [AWS Foundational Security Best Practices (FSBP) standard](https://docs.aws.amazon.com/securityhub/latest/userguide/fsbp-standard.html). The new controls are: [Cognito.4](https://docs.aws.amazon.com/securityhub/latest/userguide/cognito-controls.html#cognito-4), [Cognito.5](https://docs.aws.amazon.com/securityhub/latest/userguide/cognito-controls.html#cognito-5), [Cognito.6](https://docs.aws.amazon.com/securityhub/latest/userguide/cognito-controls.html#cognito-6), [EC2.182](https://docs.aws.amazon.com/securityhub/latest/userguide/ec2-controls.html#ec2-182), [CloudFormation.3](https://docs.aws.amazon.com/securityhub/latest/userguide/cloudformation-controls.html#cloudformation-3), [ECS.18](https://docs.aws.amazon.com/securityhub/latest/userguide/ecs-controls.html#ecs-18), and [SES.3](https://docs.aws.amazon.com/securityhub/latest/userguide/ses-controls.html#ses-3).| December 8, 2025