AWS securityhub documentation change
Summary
Documented retirement of ECS.1 control from FSBP and NIST SP 800-53 Rev. 5 standards
Security assessment
Removal of a control from security standards does not inherently indicate a resolved security issue. This is a procedural update reflecting changes in security benchmarks.
Diff
diff --git a/securityhub/latest/userguide/controls-change-log.md b/securityhub/latest/userguide/controls-change-log.md index ef34f2474..4d4e61c15 100644 --- a//securityhub/latest/userguide/controls-change-log.md +++ b//securityhub/latest/userguide/controls-change-log.md @@ -12,0 +13 @@ Date of change | Control ID and title | Description of change +March 4, 2026 | [ECS.1] Amazon ECS task definitions should have secure networking modes and user definitions | Security Hub CSPM retired this control and removed it from the [AWS Foundational Security Best Practices (FSBP) standard](https://docs.aws.amazon.com/securityhub/latest/userguide/fsbp-standard.html) and the [NIST SP 800-53 Rev. 5 standard](https://docs.aws.amazon.com/securityhub/latest/userguide/nist-standard.html).