AWS config documentation change
Summary
Added documentation for 9 new security-focused managed rules
Security assessment
Added rules enforce security controls (encryption, network isolation, KMS usage) but don't address specific vulnerabilities
Diff
diff --git a/config/latest/developerguide/managed-rules-by-aws-config.md b/config/latest/developerguide/managed-rules-by-aws-config.md index 8c2e04c3a..e7398be37 100644 --- a//config/latest/developerguide/managed-rules-by-aws-config.md +++ b//config/latest/developerguide/managed-rules-by-aws-config.md @@ -288,0 +289,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrockagentcore-codeinterpreter-networkmode-check](./bedrockagentcore-codeinterpreter-networkmode-check.html) + @@ -294,0 +297,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [bedrock-data-source-encryption-enabled](./bedrock-data-source-encryption-enabled.html) + @@ -1454,0 +1459,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-endpoint-config-kms-key-required](./sagemaker-endpoint-config-kms-key-required.html) + @@ -1470,0 +1477,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-inf-experiment-data-storage-kms-encrypted](./sagemaker-inf-experiment-data-storage-kms-encrypted.html) + + * [sagemaker-inf-experiment-instance-storage-kms-encrypted](./sagemaker-inf-experiment-instance-storage-kms-encrypted.html) + @@ -1476,0 +1487,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-explainability-job-network-isolation](./sagemaker-model-explainability-job-network-isolation.html) + @@ -1484,0 +1497,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-model-quality-job-definition-isolation](./sagemaker-model-quality-job-definition-isolation.html) + @@ -1488,0 +1503,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-monitoring-schedule-traffic-encryption](./sagemaker-monitoring-schedule-traffic-encryption.html) + @@ -1496,0 +1513,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-notebook-instance-storage-vol-kms-encrypted](./sagemaker-notebook-instance-storage-vol-kms-encrypted.html) +