AWS config documentation change
Summary
Added Asia Pacific (New Zealand) region with 100+ managed Config rules
Security assessment
Adds documentation for security-focused Config rules (e.g., encryption checks, access controls) in a new region. While not addressing a specific vulnerability, it expands documentation for security features like IAM authentication checks, encryption requirements, and public access restrictions.
Diff
diff --git a/config/latest/developerguide/managing-rules-by-region-availability.md b/config/latest/developerguide/managing-rules-by-region-availability.md index a251244dd..75117bd2c 100644 --- a//config/latest/developerguide/managing-rules-by-region-availability.md +++ b//config/latest/developerguide/managing-rules-by-region-availability.md @@ -7 +7 @@ -US East (Ohio)US East (N. Virginia)US West (N. California)US West (Oregon)Africa (Cape Town)Asia Pacific (Hong Kong)Asia Pacific (Hyderabad)Asia Pacific (Jakarta)Asia Pacific (Malaysia)Asia Pacific (Melbourne)Asia Pacific (Mumbai)Asia Pacific (Osaka)Asia Pacific (Seoul)Asia Pacific (Singapore)Asia Pacific (Sydney)Asia Pacific (Taipei)Asia Pacific (Thailand)Asia Pacific (Tokyo)Canada (Central)Canada West (Calgary)China (Beijing)China (Ningxia)Europe (Frankfurt)Europe (Ireland)Europe (London)Europe (Milan)Europe (Paris)Europe (Spain)Europe (Stockholm)Europe (Zurich)Israel (Tel Aviv)Mexico (Central)Middle East (Bahrain)Middle East (UAE)South America (São Paulo)AWS GovCloud (US-East)AWS GovCloud (US-West) +US East (Ohio)US East (N. Virginia)US West (N. California)US West (Oregon)Africa (Cape Town)Asia Pacific (Hong Kong)Asia Pacific (Hyderabad)Asia Pacific (Jakarta)Asia Pacific (Malaysia)Asia Pacific (Melbourne)Asia Pacific (Mumbai)Asia Pacific (New Zealand)Asia Pacific (Osaka)Asia Pacific (Seoul)Asia Pacific (Singapore)Asia Pacific (Sydney)Asia Pacific (Taipei)Asia Pacific (Thailand)Asia Pacific (Tokyo)Canada (Central)Canada West (Calgary)China (Beijing)China (Ningxia)Europe (Frankfurt)Europe (Ireland)Europe (London)Europe (Milan)Europe (Paris)Europe (Spain)Europe (Stockholm)Europe (Zurich)Israel (Tel Aviv)Mexico (Central)Middle East (Bahrain)Middle East (UAE)South America (São Paulo)AWS GovCloud (US-East)AWS GovCloud (US-West) @@ -13477,0 +13478,283 @@ AWS Config currently supports the following managed rules. Before using these ru +## Asia Pacific (New Zealand) Region + + * [account-part-of-organizations](./account-part-of-organizations.html) + + * [acm-certificate-expiration-check](./acm-certificate-expiration-check.html) + + * [alb-http-drop-invalid-header-enabled](./alb-http-drop-invalid-header-enabled.html) + + * [alb-http-to-https-redirection-check](./alb-http-to-https-redirection-check.html) + + * [alb-waf-enabled](./alb-waf-enabled.html) + + * [approved-amis-by-id](./approved-amis-by-id.html) + + * [approved-amis-by-tag](./approved-amis-by-tag.html) + + * [autoscaling-group-elb-healthcheck-required](./autoscaling-group-elb-healthcheck-required.html) + + * [autoscaling-launch-config-public-ip-disabled](./autoscaling-launch-config-public-ip-disabled.html) + + * [beanstalk-enhanced-health-reporting-enabled](./beanstalk-enhanced-health-reporting-enabled.html) + + * [cloudformation-stack-drift-detection-check](./cloudformation-stack-drift-detection-check.html) + + * [cloudformation-stack-notification-check](./cloudformation-stack-notification-check.html) + + * [cloudtrail-s3-dataevents-enabled](./cloudtrail-s3-dataevents-enabled.html) + + * [cloudtrail-security-trail-enabled](./cloudtrail-security-trail-enabled.html) + + * [cloudwatch-alarm-action-check](./cloudwatch-alarm-action-check.html) + + * [cloudwatch-alarm-resource-check](./cloudwatch-alarm-resource-check.html) + + * [cloudwatch-alarm-settings-check](./cloudwatch-alarm-settings-check.html) + + * [cloudwatch-log-group-encrypted](./cloudwatch-log-group-encrypted.html) + + * [cloud-trail-cloud-watch-logs-enabled](./cloud-trail-cloud-watch-logs-enabled.html) + + * [cloud-trail-enabled](./cloud-trail-enabled.html) + + * [cloud-trail-encryption-enabled](./cloud-trail-encryption-enabled.html) + + * [cloud-trail-log-file-validation-enabled](./cloud-trail-log-file-validation-enabled.html) + + * [cmk-backing-key-rotation-enabled](./cmk-backing-key-rotation-enabled.html) + + * [cw-loggroup-retention-period-check](./cw-loggroup-retention-period-check.html) + + * [db-instance-backup-enabled](./db-instance-backup-enabled.html) + + * [desired-instance-tenancy](./desired-instance-tenancy.html) + + * [desired-instance-type](./desired-instance-type.html) + + * [dms-replication-not-public](./dms-replication-not-public.html) + + * [dynamodb-autoscaling-enabled](./dynamodb-autoscaling-enabled.html) + + * [dynamodb-in-backup-plan](./dynamodb-in-backup-plan.html) + + * [dynamodb-pitr-enabled](./dynamodb-pitr-enabled.html) + + * [dynamodb-table-encrypted-kms](./dynamodb-table-encrypted-kms.html) + + * [dynamodb-throughput-limit-check](./dynamodb-throughput-limit-check.html) + + * [ebs-in-backup-plan](./ebs-in-backup-plan.html) + + * [ebs-snapshot-public-restorable-check](./ebs-snapshot-public-restorable-check.html) + + * [ec2-ebs-encryption-by-default](./ec2-ebs-encryption-by-default.html) + + * [ec2-imdsv2-check](./ec2-imdsv2-check.html) + + * [ec2-instance-detailed-monitoring-enabled](./ec2-instance-detailed-monitoring-enabled.html) + + * [ec2-instance-launched-with-allowed-ami](./ec2-instance-launched-with-allowed-ami.html) + + * [ec2-instance-managed-by-ssm](./ec2-instance-managed-by-ssm.html) + + * [ec2-instance-multiple-eni-check](./ec2-instance-multiple-eni-check.html) + + * [ec2-instance-no-public-ip](./ec2-instance-no-public-ip.html) + + * [ec2-instance-profile-attached](./ec2-instance-profile-attached.html) + + * [ec2-managedinstance-applications-blacklisted](./ec2-managedinstance-applications-blacklisted.html) + + * [ec2-managedinstance-applications-required](./ec2-managedinstance-applications-required.html) + + * [ec2-managedinstance-inventory-blacklisted](./ec2-managedinstance-inventory-blacklisted.html) + + * [ec2-managedinstance-patch-compliance-status-check](./ec2-managedinstance-patch-compliance-status-check.html) + + * [ec2-managedinstance-platform-check](./ec2-managedinstance-platform-check.html) + + * [ec2-security-group-attached-to-eni](./ec2-security-group-attached-to-eni.html) + + * [ec2-stopped-instance](./ec2-stopped-instance.html) + + * [ec2-volume-inuse-check](./ec2-volume-inuse-check.html) + + * [ecs-task-definition-user-for-host-mode-check](./ecs-task-definition-user-for-host-mode-check.html) + + * [efs-encrypted-check](./efs-encrypted-check.html) + + * [efs-in-backup-plan](./efs-in-backup-plan.html) + + * [eip-attached](./eip-attached.html) + + * [eks-endpoint-no-public-access](./eks-endpoint-no-public-access.html) + + * [elasticache-redis-cluster-automatic-backup-check](./elasticache-redis-cluster-automatic-backup-check.html) + + * [elasticsearch-encrypted-at-rest](./elasticsearch-encrypted-at-rest.html) + + * [elasticsearch-in-vpc-only](./elasticsearch-in-vpc-only.html) + + * [elasticsearch-logs-to-cloudwatch](./elasticsearch-logs-to-cloudwatch.html) + + * [elasticsearch-node-to-node-encryption-check](./elasticsearch-node-to-node-encryption-check.html) + + * [elastic-beanstalk-managed-updates-enabled](./elastic-beanstalk-managed-updates-enabled.html) + + * [elb-cross-zone-load-balancing-enabled](./elb-cross-zone-load-balancing-enabled.html) + + * [elb-custom-security-policy-ssl-check](./elb-custom-security-policy-ssl-check.html) + + * [elb-deletion-protection-enabled](./elb-deletion-protection-enabled.html) + + * [elb-logging-enabled](./elb-logging-enabled.html) + + * [elb-predefined-security-policy-ssl-check](./elb-predefined-security-policy-ssl-check.html) + + * [elb-tls-https-listeners-only](./elb-tls-https-listeners-only.html) + + * [emr-kerberos-enabled](./emr-kerberos-enabled.html) + + * [emr-master-no-public-ip](./emr-master-no-public-ip.html) + + * [encrypted-volumes](./encrypted-volumes.html) + + * [fms-shield-resource-policy-check](./fms-shield-resource-policy-check.html) + + * [fms-webacl-resource-policy-check](./fms-webacl-resource-policy-check.html) + + * [fms-webacl-rulegroup-association-check](./fms-webacl-rulegroup-association-check.html) + + * [iam-password-policy](./iam-password-policy.html) + + * [incoming-ssh-disabled](./incoming-ssh-disabled.html) + + * [instances-in-vpc](./instances-in-vpc.html) + + * [internet-gateway-authorized-vpc-only](./internet-gateway-authorized-vpc-only.html) + + * [lambda-concurrency-check](./lambda-concurrency-check.html) + + * [lambda-dlq-check](./lambda-dlq-check.html) + + * [lambda-function-public-access-prohibited](./lambda-function-public-access-prohibited.html) + + * [lambda-function-settings-check](./lambda-function-settings-check.html) + + * [lambda-inside-vpc](./lambda-inside-vpc.html) + + * [multi-region-cloud-trail-enabled](./multi-region-cloud-trail-enabled.html) + + * [no-unrestricted-route-to-igw](./no-unrestricted-route-to-igw.html) + + * [rds-automatic-minor-version-upgrade-enabled](./rds-automatic-minor-version-upgrade-enabled.html) + + * [rds-cluster-deletion-protection-enabled](./rds-cluster-deletion-protection-enabled.html) + + * [rds-cluster-iam-authentication-enabled](./rds-cluster-iam-authentication-enabled.html) + + * [rds-cluster-multi-az-enabled](./rds-cluster-multi-az-enabled.html) + + * [rds-enhanced-monitoring-enabled](./rds-enhanced-monitoring-enabled.html) + + * [rds-instance-deletion-protection-enabled](./rds-instance-deletion-protection-enabled.html) + + * [rds-instance-iam-authentication-enabled](./rds-instance-iam-authentication-enabled.html) + + * [rds-instance-public-access-check](./rds-instance-public-access-check.html) + + * [rds-in-backup-plan](./rds-in-backup-plan.html) + + * [rds-logging-enabled](./rds-logging-enabled.html) +