AWS securityhub documentation change
Summary
Added entry for ECS.1/RDS.18 retirement, updated RDS.18 removal note, and removed hyperlinks from MQ.3 references.
Security assessment
Documents administrative updates about retired controls. Hyperlink removals are formatting changes. No security issues or new security features are introduced.
Diff
diff --git a/securityhub/latest/userguide/doc-history.md b/securityhub/latest/userguide/doc-history.md index cfc566a37..67378718d 100644 --- a//securityhub/latest/userguide/doc-history.md +++ b//securityhub/latest/userguide/doc-history.md @@ -14,0 +15 @@ Change| Description| Date +Updates to security standards and controls| We retired the ECS.1 and RDS.18 controls and removed them from all applicable standards. Since Amazon EC2-Classic networking was retired, Amazon Relational Database Service (Amazon RDS) instances can no longer be deployed outside a VPC.| June 5, 2026 @@ -87 +88 @@ New security controls| Security Hub CSPM released four new controls for the [AWS -Updates to security standards and controls| We removed the [RDS.18 security control](https://docs.aws.amazon.com/securityhub/latest/userguide/rds-controls.html#rds-18) from the AWS Foundational Security Best Practices standard and automated checks for NIST SP 800-53 Rev. 5 requirements. Since Amazon EC2-Classic networking was retired, Amazon Relational Database Service (Amazon RDS) instances can no longer be deployed outside a VPC. The control continues to be part of the [AWS Control Tower service-managed standard](https://docs.aws.amazon.com/securityhub/latest/userguide/service-managed-standard-aws-control-tower.html).| March 7, 2025 +Updates to security standards and controls| We removed the RDS.18 security control (later retired) from the AWS Foundational Security Best Practices standard and automated checks for NIST SP 800-53 Rev. 5 requirements. Since Amazon EC2-Classic networking was retired, Amazon Relational Database Service (Amazon RDS) instances can no longer be deployed outside a VPC.| March 7, 2025 @@ -181 +182 @@ Select controls available in more Regions| The following controls are now availa - * [[MQ.3] Amazon MQ brokers should have automatic minor version upgrade enabled](./mq-controls.html#mq-3) + * [MQ.3] Amazon MQ brokers should have automatic minor version upgrade enabled @@ -224 +225 @@ Release of CIS AWS Foundations Benchmark v3.0.0| Security Hub CSPM released [Cen - * [[MQ.3] Amazon MQ brokers should have automatic minor version upgrade enabled](./mq-controls.html#mq-3) + * [MQ.3] Amazon MQ brokers should have automatic minor version upgrade enabled