AWS config documentation change
Summary
Added documentation for five new AWS Config managed rules across multiple AWS regions: bedrockagentcore-gateway-authorizer-enabled, bedrockagentcore-runtime-private-network-required, bedrock-agentcore-memory-encryption-enabled, sagemaker-featuregroup-online-store-encryption, and sagemaker-model-multicontainer-private-registry.
Security assessment
The changes add documentation for new AWS Config managed rules that enforce security controls (authorization, network isolation, encryption, and private registry usage). However, there is no evidence in the diff that these changes address a specific security vulnerability, incident, or weakness. The additions appear to be routine documentation updates for new security features.
Diff
diff --git a/config/latest/developerguide/managing-rules-by-region-availability.md b/config/latest/developerguide/managing-rules-by-region-availability.md index ed14f2980..bca673c2e 100644 --- a//config/latest/developerguide/managing-rules-by-region-availability.md +++ b//config/latest/developerguide/managing-rules-by-region-availability.md @@ -278,0 +279,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + + * [bedrock-agentcore-memory-encryption-enabled](./bedrock-agentcore-memory-encryption-enabled.html) + @@ -1342,0 +1349,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -1360,0 +1369,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -1779,0 +1790,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + + * [bedrock-agentcore-memory-encryption-enabled](./bedrock-agentcore-memory-encryption-enabled.html) + @@ -2929,0 +2946,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -2947,0 +2966,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -4320,0 +4341,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -4338,0 +4361,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -4753,0 +4778,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + @@ -5871,0 +5900,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -5889,0 +5920,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -7164,0 +7197,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -7176,0 +7211,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -8523,0 +8560,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -8541,0 +8580,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -10569,0 +10610,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -12270,0 +12313,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + + * [bedrock-agentcore-memory-encryption-enabled](./bedrock-agentcore-memory-encryption-enabled.html) + @@ -13316,0 +13365,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -13334,0 +13385,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -14601,0 +14654,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -15006,0 +15061,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + @@ -16050,0 +16109,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -16068,0 +16129,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -16491,0 +16554,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + + * [bedrock-agentcore-memory-encryption-enabled](./bedrock-agentcore-memory-encryption-enabled.html) + @@ -17571,0 +17640,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -17589,0 +17660,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -18012,0 +18085,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + + * [bedrock-agentcore-memory-encryption-enabled](./bedrock-agentcore-memory-encryption-enabled.html) + @@ -19100,0 +19179,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -19118,0 +19199,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -20189,0 +20272,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + + * [bedrock-agentcore-memory-encryption-enabled](./bedrock-agentcore-memory-encryption-enabled.html) + @@ -21271,0 +21360,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -21289,0 +21380,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -21696,0 +21789,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + @@ -22726,0 +22823,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -22744,0 +22843,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -24038,0 +24139,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -24701,0 +24804,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -25060,0 +25165,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + + * [bedrock-agentcore-memory-encryption-enabled](./bedrock-agentcore-memory-encryption-enabled.html) + @@ -26142,0 +26253,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -26160,0 +26273,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -26573,0 +26688,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + + * [bedrock-agentcore-memory-encryption-enabled](./bedrock-agentcore-memory-encryption-enabled.html) + @@ -27665,0 +27786,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -27683,0 +27806,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -28106,0 +28231,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + @@ -29134,0 +29263,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -29152,0 +29283,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -30437,0 +30570,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -30449,0 +30584,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -30848,0 +30985,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-gateway-authorizer-enabled](./bedrockagentcore-gateway-authorizer-enabled.html) + + * [bedrockagentcore-runtime-private-network-required](./bedrockagentcore-runtime-private-network-required.html) + @@ -31854,0 +31995,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-featuregroup-online-store-encryption](./sagemaker-featuregroup-online-store-encryption.html) + @@ -31872,0 +32015,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-multicontainer-private-registry](./sagemaker-model-multicontainer-private-registry.html) + @@ -32833,0 +32978,2 @@ AWS Config currently supports the following managed rules. Before using these ru