AWS Security ChangesHomeSearch

AWS securityhub: Document new CRI Profile v2.2 standard and automation rule updates

Service: securityhub · 2026-10-15 · Documentation low

File: securityhub/latest/userguide/doc-history.md

Summary

Adds two doc-history entries: release of the CRI Profile v2.2 security standard and the ability for automation rules to update resource criticality.

Security assessment

Changelog entry announcing a new security compliance standard and a resource-criticality feature; it is documentation of security capabilities, not a fix for a specific vulnerability.

Evidence

+New security standard| Security Hub CSPM released the [CRI Profile v2.2](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-reference-cri-profile.html) standard. This standard aligns with the CRI Profile, a cybersecurity framework developed by the Cyber Risk Institute (CRI) that harmonizes cybersecurity and regulatory expectations for the financial services sector.| October 14, 2026  

Diff

diff --git a/securityhub/latest/userguide/doc-history.md b/securityhub/latest/userguide/doc-history.md
index 95894bd..ed20662 100644
--- a//securityhub/latest/userguide/doc-history.md
+++ b//securityhub/latest/userguide/doc-history.md
@@ -14,0 +15,2 @@ Change| Description| Date
+New security standard| Security Hub CSPM released the [CRI Profile v2.2](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-reference-cri-profile.html) standard. This standard aligns with the CRI Profile, a cybersecurity framework developed by the Cyber Risk Institute (CRI) that harmonizes cybersecurity and regulatory expectations for the financial services sector.| October 14, 2026  
+Automation rules can update resource criticality| Security Hub [automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-v2-automation-rules.html) can now update the criticality of resources (resource rules), in addition to updating finding details and creating tickets. Setting resource criticality helps you prioritize remediation based on how important the affected resources are to your business.| October 1, 2026