AWS securityhub medium security documentation change

Service: securityhub · 2026-04-10 · Security-related medium

File: securityhub/latest/userguide/elb-controls.md

Summary

Updated SSL/TLS policy parameters to include new post-quantum (PQ) security policies and removed older policies

Security assessment

This change enhances cryptographic security by adding post-quantum (PQ) TLS policies (ELBSecurityPolicy-TLS13-1-2-Res-PQ-2025-09, ELBSecurityPolicy-TLS13-1-3-PQ-2025-09, etc.) and removing older policies. Post-quantum cryptography addresses future quantum computing threats to current encryption standards, representing proactive security hardening against emerging cryptographic vulnerabilities.

Diff

diff --git a/securityhub/latest/userguide/elb-controls.md b/securityhub/latest/userguide/elb-controls.md
index 0a78559cd..0401b1ae3 100644
--- a//securityhub/latest/userguide/elb-controls.md
+++ b//securityhub/latest/userguide/elb-controls.md
@@ -448 +448 @@ To associate an Application Load Balancer with a web ACL, see [Associating or di
-**Parameters:** `sslPolicies`: `ELBSecurityPolicy-TLS13-1-2-2021-06, ELBSecurityPolicy-TLS13-1-2-FIPS-2023-04, ELBSecurityPolicy-TLS13-1-3-2021-06, ELBSecurityPolicy-TLS13-1-3-FIPS-2023-04, ELBSecurityPolicy-TLS13-1-2-Res-2021-06, ELBSecurityPolicy-TLS13-1-2-Res-FIPS-2023-04` (not customizable)
+**Parameters:** `sslPolicies`: `ELBSecurityPolicy-TLS13-1-3-2021-06, ELBSecurityPolicy-TLS13-1-3-FIPS-2023-04, ELBSecurityPolicy-TLS13-1-2-Res-2021-06, ELBSecurityPolicy-TLS13-1-2-Res-FIPS-2023-04, ELBSecurityPolicy-TLS13-1-2-Res-PQ-2025-09, ELBSecurityPolicy-TLS13-1-3-PQ-2025-09, ELBSecurityPolicy-TLS13-1-2-Res-FIPS-PQ-2025-09, ELBSecurityPolicy-TLS13-1-3-FIPS-PQ-2025-09` (not customizable)