AWS config documentation change

Service: config · 2026-07-04 · Documentation low

File: config/latest/developerguide/managed-rules-by-evaluation-mode.md

Summary

Added documentation for 9 new security-focused managed rules

Security assessment

Added rules cover security best practices but don't fix specific vulnerabilities

Diff

diff --git a/config/latest/developerguide/managed-rules-by-evaluation-mode.md b/config/latest/developerguide/managed-rules-by-evaluation-mode.md
index aed808f6c..7015cef0b 100644
--- a//config/latest/developerguide/managed-rules-by-evaluation-mode.md
+++ b//config/latest/developerguide/managed-rules-by-evaluation-mode.md
@@ -311,0 +312,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [bedrockagentcore-codeinterpreter-networkmode-check](./bedrockagentcore-codeinterpreter-networkmode-check.html)
+
@@ -317,0 +320,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [bedrock-data-source-encryption-enabled](./bedrock-data-source-encryption-enabled.html)
+
@@ -1477,0 +1482,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [sagemaker-endpoint-config-kms-key-required](./sagemaker-endpoint-config-kms-key-required.html)
+
@@ -1493,0 +1500,4 @@ Currently, all AWS Config rules support detective evaluation.
+  * [sagemaker-inf-experiment-data-storage-kms-encrypted](./sagemaker-inf-experiment-data-storage-kms-encrypted.html)
+
+  * [sagemaker-inf-experiment-instance-storage-kms-encrypted](./sagemaker-inf-experiment-instance-storage-kms-encrypted.html)
+
@@ -1499,0 +1510,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [sagemaker-model-explainability-job-network-isolation](./sagemaker-model-explainability-job-network-isolation.html)
+
@@ -1507,0 +1520,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [sagemaker-model-quality-job-definition-isolation](./sagemaker-model-quality-job-definition-isolation.html)
+
@@ -1511,0 +1526,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [sagemaker-monitoring-schedule-traffic-encryption](./sagemaker-monitoring-schedule-traffic-encryption.html)
+
@@ -1519,0 +1536,2 @@ Currently, all AWS Config rules support detective evaluation.
+  * [sagemaker-notebook-instance-storage-vol-kms-encrypted](./sagemaker-notebook-instance-storage-vol-kms-encrypted.html)
+