AWS Security ChangesHomeSearch

AWS securityhub: Remove retired EKS.3 encrypted Kubernetes secrets control row

Service: securityhub · 2026-10-10 · Documentation low

File: securityhub/latest/userguide/securityhub-controls-reference.md · Type: encryption

Summary

Deleted the EKS.3 row (EKS clusters should use encrypted Kubernetes secrets) from the Security Hub controls reference table, removing its standards mappings (AWS FSBP, NIST SP 800-53 Rev. 5, PCI DSS v4.0.1) and MEDIUM severity listing.

Security assessment

The diff only deletes a table row referencing an existing encryption-focused control (EKS.3); there is no evidence of a specific vulnerability, incident, or fix being addressed, so this is documentation cleanup of a retired/deprecated control reference with minor security relevance.

Evidence

-[EKS.3](./eks-controls.html#eks-3) | EKS clusters should use encrypted Kubernetes secrets | AWS Foundational Security Best Practices, NIST SP 800-53 Rev. 5, PCI DSS v4.0.1 | MEDIUM |  No | Periodic  

Diff

diff --git a/securityhub/latest/userguide/securityhub-controls-reference.md b/securityhub/latest/userguide/securityhub-controls-reference.md
index ffab74b..ba5b2a7 100644
--- a//securityhub/latest/userguide/securityhub-controls-reference.md
+++ b//securityhub/latest/userguide/securityhub-controls-reference.md
@@ -277 +276,0 @@ Security control ID | Security control title | Applicable standards | Severity |
-[EKS.3](./eks-controls.html#eks-3) | EKS clusters should use encrypted Kubernetes secrets | AWS Foundational Security Best Practices, NIST SP 800-53 Rev. 5, PCI DSS v4.0.1 | MEDIUM |  No | Periodic