AWS securityhub documentation change
Summary
Added two new entries to the controls change log for April 3, 2026: updated EKS.2 control parameter from 1.32 to 1.33 due to end of standard support for Kubernetes 1.32, and removed ruby3.2 from Lambda.2 supported runtimes due to deprecation.
Security assessment
These are routine updates to reflect current supported versions and deprecations. While using unsupported versions can have security implications, the changes themselves are standard maintenance updates rather than addressing specific security vulnerabilities or incidents.
Diff
diff --git a/securityhub/latest/userguide/controls-change-log.md b/securityhub/latest/userguide/controls-change-log.md index cdd28754c..056c89157 100644 --- a//securityhub/latest/userguide/controls-change-log.md +++ b//securityhub/latest/userguide/controls-change-log.md @@ -12,0 +13,2 @@ Date of change | Control ID and title | Description of change +April 3, 2026 | [[EKS.2] EKS clusters should run on a supported Kubernetes version](./eks-controls.html#eks-2) | This control checks whether an Amazon EKS cluster runs on a supported Kubernetes version. Security Hub CSPM changed the parameter value for this control from `1.32` to `1.33`. Standard support for Kubernetes version 1.32 in Amazon EKS ended on March 23, 2026. +April 3, 2026 | [[Lambda.2] Lambda functions should use supported runtimes](./lambda-controls.html#lambda-2) | Lambda.2 parameter for supported runtimes no longer includes `ruby3.2` as Lambda has deprecated this runtime.