AWS config medium security documentation change

Service: config · 2026-03-10 · Security-related medium

File: config/latest/developerguide/vpc-endpoint-enabled.md

Summary

Added FIPS endpoint compliance consideration

Security assessment

Explicit FIPS compliance mention strengthens cryptographic standard adherence

Diff

diff --git a/config/latest/developerguide/vpc-endpoint-enabled.md b/config/latest/developerguide/vpc-endpoint-enabled.md
index bbde588da..c45804e83 100644
--- a//config/latest/developerguide/vpc-endpoint-enabled.md
+++ b//config/latest/developerguide/vpc-endpoint-enabled.md
@@ -25 +25 @@ Type: CSV
-Comma-separated list of service names or endpoints. Example: "access-analyzer, appconfig, cloudtrail" or "com.amazonaws.region.access-analyzer". Use DescribeVpcEndpointServices for available names.
+Comma-separated list of service names or endpoints. Example: "ec2, ecr.api" or "com.amazonaws.region.ec2". Use DescribeVpcEndpointServices for available names. The rule considers FIPS version of the endpoint to be compliant as well.