AWS securityhub documentation change
Summary
Added retirement note for a control regarding EKS secrets encryption, explaining it will be retired after August 10, 2026 due to Kubernetes 1.28 making the feature default.
Security assessment
The change only documents the retirement timeline of an existing control. There's no evidence of a security vulnerability being addressed. The note explains that the control becomes obsolete due to default security improvements.
Diff
diff --git a/securityhub/latest/userguide/eks-controls.md b/securityhub/latest/userguide/eks-controls.md index bea150ba1..afc806dd5 100644 --- a//securityhub/latest/userguide/eks-controls.md +++ b//securityhub/latest/userguide/eks-controls.md @@ -85,0 +86,4 @@ When you encrypt secrets, you can use AWS Key Management Service (AWS KMS) keys +###### Note + +This control will be retired after August 10, 2026 and removed from all applicable Security Hub CSPM standards. Starting with Kubernetes version 1.28, Amazon EKS clusters have Kubernetes secrets protected with envelope encryption by default. +