AWS Security ChangesHomeSearch

AWS securityhub documentation change

Service: securityhub · 2026-05-07 · Documentation low

File: securityhub/latest/userguide/controls-change-log.md

Summary

Updated Lambda.2 control to add ruby4.0 support and remove deprecated nodejs20.x runtime

Security assessment

Routine maintenance of supported runtimes. No security vulnerability addressed; reflects standard deprecation lifecycle without security impact.

Diff

diff --git a/securityhub/latest/userguide/controls-change-log.md b/securityhub/latest/userguide/controls-change-log.md
index 23f05f8d5..4f0b33e5d 100644
--- a//securityhub/latest/userguide/controls-change-log.md
+++ b//securityhub/latest/userguide/controls-change-log.md
@@ -14,0 +15 @@ Date of change | Control ID and title | Description of change
+May 4, 2026 | [[Lambda.2] Lambda functions should use supported runtimes](./lambda-controls.html#lambda-2) | Lambda.2 checks whether the AWS Lambda function settings for runtimes match the expected values set for the supported runtimes in each language. Security Hub CSPM now supports `ruby4.0` as a parameter and no longer includes `nodejs20.x` as AWS Lambda has deprecated this runtime.