AWS securityhub: Add CRI Profile v2.2 mappings to AWS DataSync controls
Summary
Adds two 'Related requirements' lines for DataSync controls: a detection/monitoring mapping (DE.AE-*, PR.PS-04.*) and an asset-inventory mapping (ID.AM-02.01, ID.AM-05.01).
Security assessment
Adds compliance-framework references to existing DataSync control documentation without changing control behavior or providing new hardening/security configuration guidance.
Evidence
+**Related requirements:** CRI Profile v2.2/ID.AM-02.01, CRI Profile v2.2/ID.AM-05.01
Diff
diff --git a/securityhub/latest/userguide/datasync-controls.md b/securityhub/latest/userguide/datasync-controls.md index 1216f79..776c038 100644 --- a//securityhub/latest/userguide/datasync-controls.md +++ b//securityhub/latest/userguide/datasync-controls.md @@ -14,0 +15,2 @@ These Security Hub CSPM controls evaluate the AWS DataSync service and resources +**Related requirements:** CRI Profile v2.2/DE.AE-02.01, CRI Profile v2.2/DE.AE-03.01, CRI Profile v2.2/DE.AE-03.02, CRI Profile v2.2/DE.AE-07.02, CRI Profile v2.2/PR.PS-04.02, CRI Profile v2.2/PR.PS-04.03 + @@ -36,0 +39,2 @@ For information about configuring logging for AWS DataSync tasks, see [Monitorin +**Related requirements:** CRI Profile v2.2/ID.AM-02.01, CRI Profile v2.2/ID.AM-05.01 +