AWS securityhub: Remove AppSync and EKS encryption controls from unsupported-region lists
Summary
Deletes entries for AppSync.1 (API caches encrypted at rest), AppSync.6 (API caches encrypted in transit), and EKS.3 (encrypted Kubernetes secrets) from the 'controls not supported' lists across many AWS regions, indicating these encryption controls are now available in those regions.
Security assessment
The diff only removes lines listing encryption-related Security Hub controls (AppSync.1/AppSync.6 at-rest/in-transit encryption, EKS.3 encrypted secrets) from per-region 'not supported' sections, reflecting expanded regional availability of these controls. No vulnerability, CVE, or incident is referenced; it is availability documentation for encryption best-practice controls.
Evidence
- * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1)
Diff
diff --git a/securityhub/latest/userguide/regions-controls.md b/securityhub/latest/userguide/regions-controls.md index e09bbf1..3cb1eb5 100644 --- a//securityhub/latest/userguide/regions-controls.md +++ b//securityhub/latest/userguide/regions-controls.md @@ -119,4 +118,0 @@ The following controls are not supported in the US East (Ohio) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -218,4 +213,0 @@ The following controls are not supported in the US West (N. California) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -369,4 +360,0 @@ The following controls are not supported in the US West (Oregon) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -438,4 +425,0 @@ The following controls are not supported in the Africa (Cape Town) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -659,4 +642,0 @@ The following controls are not supported in the Asia Pacific (Hong Kong) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -844,4 +823,0 @@ The following controls are not supported in the Asia Pacific (Hyderabad) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -1285,4 +1260,0 @@ The following controls are not supported in the Asia Pacific (Jakarta) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -1626,2 +1597,0 @@ The following controls are not supported in the Asia Pacific (Malaysia) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - @@ -1632,2 +1601,0 @@ The following controls are not supported in the Asia Pacific (Malaysia) Region. - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -1898,2 +1865,0 @@ The following controls are not supported in the Asia Pacific (Malaysia) Region. - * [[EKS.3] EKS clusters should use encrypted Kubernetes secrets](./eks-controls.html#eks-3) - @@ -2395,2 +2360,0 @@ The following controls are not supported in the Asia Pacific (Melbourne) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - @@ -2401,2 +2364,0 @@ The following controls are not supported in the Asia Pacific (Melbourne) Region. - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -2854,4 +2815,0 @@ The following controls are not supported in the Asia Pacific (Mumbai) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -2991,2 +2948,0 @@ The following controls are not supported in the Asia Pacific (New Zealand) Regio - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - @@ -2999,2 +2954,0 @@ The following controls are not supported in the Asia Pacific (New Zealand) Regio - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -3281,2 +3234,0 @@ The following controls are not supported in the Asia Pacific (New Zealand) Regio - * [[EKS.3] EKS clusters should use encrypted Kubernetes secrets](./eks-controls.html#eks-3) - @@ -3832,4 +3783,0 @@ The following controls are not supported in the Asia Pacific (Osaka) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -4065,4 +4012,0 @@ The following controls are not supported in the Asia Pacific (Seoul) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -4182,4 +4125,0 @@ The following controls are not supported in the Asia Pacific (Singapore) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -4259,4 +4198,0 @@ The following controls are not supported in the Asia Pacific (Sydney) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -4376,2 +4311,0 @@ The following controls are not supported in the Asia Pacific (Taipei) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - @@ -4384,2 +4317,0 @@ The following controls are not supported in the Asia Pacific (Taipei) Region. - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -4734,2 +4665,0 @@ The following controls are not supported in the Asia Pacific (Taipei) Region. - * [[EKS.3] EKS clusters should use encrypted Kubernetes secrets](./eks-controls.html#eks-3) - @@ -5391,2 +5320,0 @@ The following controls are not supported in the Asia Pacific (Thailand) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - @@ -5397,2 +5324,0 @@ The following controls are not supported in the Asia Pacific (Thailand) Region. - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -5679,2 +5604,0 @@ The following controls are not supported in the Asia Pacific (Thailand) Region. - * [[EKS.3] EKS clusters should use encrypted Kubernetes secrets](./eks-controls.html#eks-3) - @@ -6188,4 +6111,0 @@ The following controls are not supported in the Asia Pacific (Tokyo) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -6265,4 +6184,0 @@ The following controls are not supported in the Canada (Central) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -6410,2 +6325,0 @@ The following controls are not supported in the Canada West (Calgary) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - @@ -6416,2 +6329,0 @@ The following controls are not supported in the Canada West (Calgary) Region. - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -6662,2 +6573,0 @@ The following controls are not supported in the Canada West (Calgary) Region. - * [[EKS.3] EKS clusters should use encrypted Kubernetes secrets](./eks-controls.html#eks-3) - @@ -7167,4 +7076,0 @@ The following controls are not supported in the China (Beijing) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -7321,2 +7226,0 @@ The following controls are not supported in the China (Beijing) Region. - * [[EKS.3] EKS clusters should use encrypted Kubernetes secrets](./eks-controls.html#eks-3) - @@ -7674,4 +7577,0 @@ The following controls are not supported in the China (Ningxia) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -7824,2 +7723,0 @@ The following controls are not supported in the China (Ningxia) Region. - * [[EKS.3] EKS clusters should use encrypted Kubernetes secrets](./eks-controls.html#eks-3) - @@ -8190,4 +8087,0 @@ The following controls are not supported in the Europe (Ireland) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -8257,4 +8150,0 @@ The following controls are not supported in the Europe (London) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -8376,4 +8265,0 @@ The following controls are not supported in the Europe (Milan) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -8599,4 +8484,0 @@ The following controls are not supported in the Europe (Paris) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -8750,4 +8631,0 @@ The following controls are not supported in the Europe (Spain) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -9173,4 +9050,0 @@ The following controls are not supported in the Europe (Stockholm) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -9332,4 +9205,0 @@ The following controls are not supported in the Europe (Zurich) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -9755,2 +9624,0 @@ The following controls are not supported in the Israel (Tel Aviv) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - @@ -9761,2 +9628,0 @@ The following controls are not supported in the Israel (Tel Aviv) Region. - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -10286,2 +10151,0 @@ The following controls are not supported in the Mexico (Central) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - @@ -10294,2 +10157,0 @@ The following controls are not supported in the Mexico (Central) Region. - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -10572,2 +10433,0 @@ The following controls are not supported in the Mexico (Central) Region. - * [[EKS.3] EKS clusters should use encrypted Kubernetes secrets](./eks-controls.html#eks-3) - @@ -11356,4 +11215,0 @@ The following controls are not supported in the Middle East (UAE) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - - * [[AppSync.6] AWS AppSync API caches should be encrypted in transit](./appsync-controls.html#appsync-6) - @@ -11912,2 +11767,0 @@ The following controls are not supported in the AWS GovCloud (US-East) Region. - * [[AppSync.1] AWS AppSync API caches should be encrypted at rest](./appsync-controls.html#appsync-1) - @@ -11920,2 +11773,0 @@ The following controls are not supported in the AWS GovCloud (US-East) Region.