AWS config documentation change

Service: config · 2026-04-04 · Documentation low

File: config/latest/developerguide/managed-rules-by-trigger-type.md

Summary

Added five new AWS Config managed rules to the change-triggered rules list: ec2-vpn-connection-ike-version-check, eks-nodegroup-supported-version-check, kendra-index-tagged, sagemaker-featuregroup-encryption-at-rest, and sagemaker-model-private-registry-required.

Security assessment

The change adds documentation for new AWS Config managed rules that enforce security best practices. The rules check for: IKE version compliance for VPN connections (security protocol), EKS node group version support (security updates), Kendra index tagging (resource management), SageMaker feature group encryption at rest (data protection), and SageMaker model private registry requirements (access control). While these are security-focused rules, there's no evidence in the diff that they address specific, disclosed security vulnerabilities or incidents.

Diff

diff --git a/config/latest/developerguide/managed-rules-by-trigger-type.md b/config/latest/developerguide/managed-rules-by-trigger-type.md
index 137158751..9b0ae98ab 100644
--- a//config/latest/developerguide/managed-rules-by-trigger-type.md
+++ b//config/latest/developerguide/managed-rules-by-trigger-type.md
@@ -532,0 +533,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [ec2-vpn-connection-ike-version-check](./ec2-vpn-connection-ike-version-check.html)
+
@@ -602,0 +605,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [eks-nodegroup-supported-version-check](./eks-nodegroup-supported-version-check.html)
+
@@ -804,0 +809,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [kendra-index-tagged](./kendra-index-tagged.html)
+
@@ -1130,0 +1137,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [sagemaker-featuregroup-encryption-at-rest](./sagemaker-featuregroup-encryption-at-rest.html)
+
@@ -1148,0 +1157,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [sagemaker-model-private-registry-required](./sagemaker-model-private-registry-required.html)
+