AWS securityhub: Add CRI Profile v2.2 mappings to AppSync Security Hub controls
Summary
Extends the 'Related requirements' lists for two AWS AppSync Security Hub controls, adding CRI Profile v2.2 monitoring/audit (DE.AE) and access-control (PR.AA) requirement mappings alongside the existing PCI DSS and NIST 800-53 references.
Security assessment
The only change is appending CRI Profile v2.2 framework identifiers to existing compliance-mapping lines for AppSync controls (logging/monitoring and tagging/access control). No control logic, permission, or configuration guidance is altered, so this is compliance metadata rather than a fix for a specific weakness.
Evidence
**Related requirements:** PCI DSS v4.0.1/10.4.2, CRI Profile v2.2/DE.AE-02.01, CRI Profile v2.2/DE.AE-03.01, CRI Profile v2.2/DE.AE-03.02, CRI Profile v2.2/DE.AE-07.02, CRI Profile v2.2/PR.PS-04.01, CRI Profile v2.2/PR.PS-04.02, CRI Profile v2.2/PR.PS-04.03
Diff
diff --git a/securityhub/latest/userguide/appsync-controls.md b/securityhub/latest/userguide/appsync-controls.md index 385937a..19a85f7 100644 --- a//securityhub/latest/userguide/appsync-controls.md +++ b//securityhub/latest/userguide/appsync-controls.md @@ -17 +17 @@ These controls may not be available in all AWS Regions. For more information, se -**Related requirements:** PCI DSS v4.0.1/10.4.2 +**Related requirements:** PCI DSS v4.0.1/10.4.2, CRI Profile v2.2/DE.AE-02.01, CRI Profile v2.2/DE.AE-03.01, CRI Profile v2.2/DE.AE-03.02, CRI Profile v2.2/DE.AE-07.02, CRI Profile v2.2/PR.PS-04.01, CRI Profile v2.2/PR.PS-04.02, CRI Profile v2.2/PR.PS-04.03 @@ -75 +75 @@ To add tags to an AWS AppSync GraphQL API, see [TagResource](https://docs.aws.am -**Related requirements:** NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3, NIST.800-53.r5 AC-3(15), NIST.800-53.r5 AC-3(7), NIST.800-53.r5 AC-6 +**Related requirements:** NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3, NIST.800-53.r5 AC-3(15), NIST.800-53.r5 AC-3(7), NIST.800-53.r5 AC-6, CRI Profile v2.2/PR.AA-01.01, CRI Profile v2.2/PR.AA-03.01