AWS Security ChangesHomeSearch

AWS securityhub: Remove EKS.3 encrypted secrets control from PCI DSS mapping list

Service: securityhub · 2026-10-10 · Documentation low

File: securityhub/latest/userguide/pci-standard.md · Type: encryption

Summary

Deleted the entry mapping the EKS.3 control (EKS clusters should use encrypted Kubernetes secrets) from the list of Security Hub CSPM controls that apply to PCI DSS v4.0.

Security assessment

The diff only removes a cross-reference to an encryption-related EKS control from the PCI DSS standard mapping list; there is no indication of a specific vulnerability, CVE, or incident being addressed, and no new security guidance is added.

Evidence

-[[EKS.3] EKS clusters should use encrypted Kubernetes secrets](./eks-controls.html#eks-3)

Diff

diff --git a/securityhub/latest/userguide/pci-standard.md b/securityhub/latest/userguide/pci-standard.md
index 09e4049..e2f1c1f 100644
--- a//securityhub/latest/userguide/pci-standard.md
+++ b//securityhub/latest/userguide/pci-standard.md
@@ -221,2 +220,0 @@ The following list specifies which Security Hub CSPM controls apply to PCI DSS v
-[[EKS.3] EKS clusters should use encrypted Kubernetes secrets](./eks-controls.html#eks-3)
-