AWS securityhub documentation change
Summary
Added compliance mappings for EFS.6 control and note about its migration from FSBP to other standards on July 30, 2026.
Security assessment
Enhances documentation of compliance requirements for an existing security control. No vulnerability fix indicated - maintains security documentation integrity.
Diff
diff --git a/securityhub/latest/userguide/efs-controls.md b/securityhub/latest/userguide/efs-controls.md index c10af0217..b0f73e12b 100644 --- a//securityhub/latest/userguide/efs-controls.md +++ b//securityhub/latest/userguide/efs-controls.md @@ -149,0 +150,2 @@ To add tags to an EFS access point, see [Tagging Amazon EFS resources](https://d +**Related requirements:** NIST.800-53.r5 SC-7, NIST.800-171.r2 3.1.20, PCI DSS v4.0.1/1.4.4 + @@ -169,0 +172,4 @@ Mount targets in subnets with auto-assign public IPv6 addresses enabled can rece +###### Note + +On July 30, 2026, Security Hub CSPM will remove this control from the [AWS Foundational Security Best Practices (FSBP) standard](https://docs.aws.amazon.com/securityhub/latest/userguide/fsbp-standard.html). This control will now be available in the [NIST SP 800-53 Rev. 5 standard](https://docs.aws.amazon.com/securityhub/latest/userguide/nist-standard.html), the [NIST SP 800-171 Revision 2 standard](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-reference-nist-800-171.html), and the [PCI DSS v4.0.1 standard](https://docs.aws.amazon.com/securityhub/latest/userguide/pci-standard.html). +