AWS securityhub medium security documentation change
Summary
Added entry documenting retirement of AppSync.1/AppSync.6 controls and AWS AppSync's default encryption enforcement.
Security assessment
This change logs a security standards update where controls are retired because the underlying security risk (lack of encryption) has been mitigated at the service level.
Diff
diff --git a/securityhub/latest/userguide/doc-history.md b/securityhub/latest/userguide/doc-history.md index fff71f269..4db084c00 100644 --- a//securityhub/latest/userguide/doc-history.md +++ b//securityhub/latest/userguide/doc-history.md @@ -12,0 +13 @@ Change| Description| Date +Updates to security standards and controls| We retired the AppSync.1 and AppSync.6 controls and removed them from the [AWS Foundational Security Best Practices (FSBP) standard](https://docs.aws.amazon.com/securityhub/latest/userguide/fsbp-standard.html). AWS AppSync now provides default encryption on all current and future API caches.| March 9, 2026