AWS securityhub: Add CRI Profile v2.2 mappings to Amazon Cognito Security Hub controls
Summary
Adds two 'Related requirements' lines mapping Cognito threat-protection and guest-access controls to CRI Profile v2.2 authentication/authorization requirements (PR.AA-01.02, PR.AA-02.01, PR.AA-03.01/.02, PR.AA-04.01, PR.AA-01.01, PR.PS-01.01).
Security assessment
The added line only attributes the existing Cognito threat-protection/authentication controls to CRI Profile identity and access requirements; no authentication or authorization behavior is altered and no specific vulnerability is addressed.
Evidence
+**Related requirements:** CRI Profile v2.2/PR.AA-01.02, CRI Profile v2.2/PR.AA-02.01, CRI Profile v2.2/PR.AA-03.01, CRI Profile v2.2/PR.AA-03.02, CRI Profile v2.2/PR.AA-04.01
Diff
diff --git a/securityhub/latest/userguide/cognito-controls.md b/securityhub/latest/userguide/cognito-controls.md index f369b97..3e97db6 100644 --- a//securityhub/latest/userguide/cognito-controls.md +++ b//securityhub/latest/userguide/cognito-controls.md @@ -40,0 +41,2 @@ For information about activating threat protection for an Amazon Cognito user po +**Related requirements:** CRI Profile v2.2/PR.AA-01.02, CRI Profile v2.2/PR.AA-02.01, CRI Profile v2.2/PR.AA-03.01, CRI Profile v2.2/PR.AA-03.02, CRI Profile v2.2/PR.AA-04.01 + @@ -62,0 +65,2 @@ For information about deactivating guest access for an Amazon Cognito identity p +**Related requirements:** CRI Profile v2.2/PR.AA-01.01, CRI Profile v2.2/PR.PS-01.01 +