AWS securityhub: Add CRI Profile v2.2 mappings to EventBridge Security Hub controls

Service: securityhub · 2026-10-15 · Documentation low

File: securityhub/latest/userguide/eventbridge-controls.md

Summary

Appends CRI Profile v2.2 requirement identifiers (PR.AA-05.01, PR.IR-01.03, PR.IR-03.01) to the 'Related requirements' lists of two EventBridge Security Hub controls, alongside existing NIST 800-53 and PCI DSS references.

Security assessment

The only change is the addition of a compliance-framework cross-reference (CRI Profile v2.2) to existing control requirement lists. No control logic, permission, or configuration guidance is altered, so there is no concrete vulnerability or hardening content introduced.

Evidence

+**Related requirements:** NIST.800-53.r5 AC-2, NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3, NIST.800-53.r5 AC-3(15), NIST.800-53.r5 AC-3(7), NIST.800-53.r5 AC-5, NIST.800-53.r5 AC-6, NIST.800-53.r5 AC-6(3), PCI DSS v4.0.1/10.3.1, CRI Profile v2.2/PR.AA-05.01

Diff

diff --git a/securityhub/latest/userguide/eventbridge-controls.md b/securityhub/latest/userguide/eventbridge-controls.md
index 378835f..904b464 100644
--- a//securityhub/latest/userguide/eventbridge-controls.md
+++ b//securityhub/latest/userguide/eventbridge-controls.md
@@ -47 +47 @@ To add tags to an EventBridge event bus, see [Amazon EventBridge tags](https://d
-**Related requirements:** NIST.800-53.r5 AC-2, NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3, NIST.800-53.r5 AC-3(15), NIST.800-53.r5 AC-3(7), NIST.800-53.r5 AC-5, NIST.800-53.r5 AC-6, NIST.800-53.r5 AC-6(3), PCI DSS v4.0.1/10.3.1
+**Related requirements:** NIST.800-53.r5 AC-2, NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3, NIST.800-53.r5 AC-3(15), NIST.800-53.r5 AC-3(7), NIST.800-53.r5 AC-5, NIST.800-53.r5 AC-6, NIST.800-53.r5 AC-6(3), PCI DSS v4.0.1/10.3.1, CRI Profile v2.2/PR.AA-05.01
@@ -71 +71 @@ To attach a resource-based policy to an EventBridge custom event bus, see [Using
-**Related requirements:** NIST.800-53.r5 CP-10, NIST.800-53.r5 CP-6(2), NIST.800-53.r5 SC-36, NIST.800-53.r5 SC-5(2), NIST.800-53.r5 SI-13(5)
+**Related requirements:** NIST.800-53.r5 CP-10, NIST.800-53.r5 CP-6(2), NIST.800-53.r5 SC-36, NIST.800-53.r5 SC-5(2), NIST.800-53.r5 SI-13(5), CRI Profile v2.2/PR.IR-01.03, CRI Profile v2.2/PR.IR-03.01