AWS Security ChangesHomeSearch

AWS config documentation change

Service: config · 2026-07-04 · Documentation low

File: config/latest/developerguide/managed-rules-by-trigger-type.md

Summary

Added documentation for 9 new security-focused managed rules

Security assessment

New rules enforce security controls but don't address specific security incidents

Diff

diff --git a/config/latest/developerguide/managed-rules-by-trigger-type.md b/config/latest/developerguide/managed-rules-by-trigger-type.md
index a026bf1c6..cfe0c9f9c 100644
--- a//config/latest/developerguide/managed-rules-by-trigger-type.md
+++ b//config/latest/developerguide/managed-rules-by-trigger-type.md
@@ -266,0 +267,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [bedrockagentcore-codeinterpreter-networkmode-check](./bedrockagentcore-codeinterpreter-networkmode-check.html)
+
@@ -272,0 +275,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [bedrock-data-source-encryption-enabled](./bedrock-data-source-encryption-enabled.html)
+
@@ -1142,0 +1147,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [sagemaker-endpoint-config-kms-key-required](./sagemaker-endpoint-config-kms-key-required.html)
+
@@ -1156,0 +1163,4 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [sagemaker-inf-experiment-data-storage-kms-encrypted](./sagemaker-inf-experiment-data-storage-kms-encrypted.html)
+
+  * [sagemaker-inf-experiment-instance-storage-kms-encrypted](./sagemaker-inf-experiment-instance-storage-kms-encrypted.html)
+
@@ -1162,0 +1173,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [sagemaker-model-explainability-job-network-isolation](./sagemaker-model-explainability-job-network-isolation.html)
+
@@ -1170,0 +1183,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [sagemaker-model-quality-job-definition-isolation](./sagemaker-model-quality-job-definition-isolation.html)
+
@@ -1174,0 +1189,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [sagemaker-monitoring-schedule-traffic-encryption](./sagemaker-monitoring-schedule-traffic-encryption.html)
+
@@ -1178,0 +1195,2 @@ _Change-triggered rules_ are rules that AWS Config evaluates in response to conf
+  * [sagemaker-notebook-instance-storage-vol-kms-encrypted](./sagemaker-notebook-instance-storage-vol-kms-encrypted.html)
+