AWS securityhub documentation change
Summary
Added change log entry for April 27, 2026, documenting that Security Hub CSPM changed the backing rule for control EC2.4 to simplify evaluation logic.
Security assessment
This change documents an update to a security control rule for evaluating stopped EC2 instances. While it relates to security compliance, there is no evidence of a security vulnerability being addressed; it appears to be a routine improvement to evaluation logic.
Diff
diff --git a/securityhub/latest/userguide/controls-change-log.md b/securityhub/latest/userguide/controls-change-log.md index 2aac4899b..23f05f8d5 100644 --- a//securityhub/latest/userguide/controls-change-log.md +++ b//securityhub/latest/userguide/controls-change-log.md @@ -14,0 +15 @@ Date of change | Control ID and title | Description of change +April 27, 2026 | [[EC2.4] Stopped EC2 instances should be removed after a specified time period](./ec2-controls.html#ec2-4) | Security Hub CSPM changed the backing rule for this control from ec2-stopped-instance to a custom Security Hub CSPM rule, ec2-stopped-instance-days-check to simplify evaluation logic.