AWS config documentation change
Summary
Added 5 new managed rules: cloudformation-stack-service-role-check, cloudfront-distribution-key-group-enabled, ecs-capacity-provider-termination-check, ecs-task-definition-linux-user-non-root, ecs-task-definition-windows-user-non-admin
Security assessment
Adds documentation for new security-focused rules including CloudFront key groups and ECS non-root/non-admin execution policies, enhancing security best practices documentation without addressing specific vulnerabilities.
Diff
diff --git a/config/latest/developerguide/managed-rules-by-aws-config.md b/config/latest/developerguide/managed-rules-by-aws-config.md index f5bee4514..fafd6ef69 100644 --- a//config/latest/developerguide/managed-rules-by-aws-config.md +++ b//config/latest/developerguide/managed-rules-by-aws-config.md @@ -264,0 +265,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [cloudformation-stack-service-role-check](./cloudformation-stack-service-role-check.html) + @@ -274,0 +277,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [cloudfront-distribution-key-group-enabled](./cloudfront-distribution-key-group-enabled.html) + @@ -602,0 +607,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [ecs-capacity-provider-termination-check](./ecs-capacity-provider-termination-check.html) + @@ -614,0 +621,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [ecs-task-definition-linux-user-non-root](./ecs-task-definition-linux-user-non-root.html) + @@ -626,0 +635,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [ecs-task-definition-windows-user-non-admin](./ecs-task-definition-windows-user-non-admin.html) +