AWS securityhub documentation change

Service: securityhub · 2026-04-10 · Documentation low

File: securityhub/latest/userguide/controls-config-resources.md

Summary

Added new resource type mappings for multiple AWS services including API Gateway, CloudTrail, EC2, EKS, and SageMaker controls

Security assessment

This expands the coverage of Security Hub controls to additional resource types, enhancing security monitoring capabilities. The changes add support for new controls (APIGateway.11, CloudTrail.11, EC2.183, EKS.9, SageMaker.16, SageMaker.17) but don't indicate specific security vulnerabilities.

Diff

diff --git a/securityhub/latest/userguide/controls-config-resources.md b/securityhub/latest/userguide/controls-config-resources.md
index eb3876ff6..79e7c6963 100644
--- a//securityhub/latest/userguide/controls-config-resources.md
+++ b//securityhub/latest/userguide/controls-config-resources.md
@@ -47,0 +48 @@ Amazon API Gateway | `AWS::ApiGateway::Stage` |  APIGateway.1 APIGateway.2 APIGa
+`AWS::ApiGateway::DomainName` | APIGateway.11  
@@ -69,0 +71 @@ AWS CloudTrail | `AWS::CloudTrail::Trail` | CloudTrail.9
+`AWS::CloudTrail::EventDataStore` | CloudTrail.11  
@@ -117 +119 @@ Amazon Elastic Compute Cloud (EC2) | `AWS::EC2::ClientVpnEndpoint` |  EC2.51
-`AWS::EC2::VPNConnection` | EC2.20 EC2.171  
+`AWS::EC2::VPNConnection` | EC2.20 EC2.171 EC2.183  
@@ -134,0 +137 @@ Amazon Elastic Kubernetes Service (Amazon EKS) | `AWS::EKS::Cluster` |  EKS.2 EK
+`AWS::EKS::Nodegroup` | EKS.9  
@@ -216 +219 @@ Amazon SageMaker AI  | `AWS::SageMaker::AppImageConfig` |  SageMaker.6
-`AWS::SageMaker::Model` |  SageMaker.5  
+`AWS::SageMaker::Model` |  SageMaker.5 SageMaker.16  
@@ -217,0 +221 @@ Amazon SageMaker AI  | `AWS::SageMaker::AppImageConfig` |  SageMaker.6
+`AWS::SageMaker::FeatureGroup` | SageMaker.17  
@@ -248 +252 @@ AWS service | Resource types
-Amazon API Gateway |  `AWS::ApiGateway::Stage`, `AWS::ApiGatewayV2::Stage`  
+Amazon API Gateway |  `AWS::ApiGateway::DomainName`, `AWS::ApiGateway::Stage`, `AWS::ApiGatewayV2::Stage`  
@@ -255,0 +260 @@ Amazon Cognito |  `AWS::Cognito::IdentityPool`, `AWS::Cognito::UserPool`
+AWS CloudTrail |  `AWS::CloudTrail::EventDataStore`  
@@ -266 +271 @@ Amazon Elastic File System (Amazon EFS) |  `AWS::EFS::AccessPoint`, `AWS::EFS::F
-Amazon Elastic Kubernetes Service (Amazon EKS) |  `AWS::EKS::Cluster`  
+Amazon Elastic Kubernetes Service (Amazon EKS) |  `AWS::EKS::Cluster`, `AWS::EKS::Nodegroup`  
@@ -284 +289 @@ Amazon Simple Storage Service (Amazon S3) |  `AWS::S3::AccessPoint`, `AWS::S3::A
-Amazon SageMaker AI |  `AWS::SageMaker::Model`, `AWS::SageMaker::NotebookInstance`  
+Amazon SageMaker AI |  `AWS::SageMaker::FeatureGroup`, `AWS::SageMaker::Model`, `AWS::SageMaker::NotebookInstance`