AWS securityhub: Add CRI Profile v2.2 mappings to Amazon MSK Security Hub controls
Summary
Appends CRI Profile v2.2 compliance framework references to the 'Related requirements' lines of Amazon MSK Security Hub CSPM controls, including newly added requirement lines.
Security assessment
Changes consist solely of adding CRI Profile v2.2 framework mappings to existing control requirement lists; no security feature, fix, or guidance is introduced.
Evidence
+**Related requirements:** CRI Profile v2.2/PR.AA-03.02, CRI Profile v2.2/PR.IR-01.01, CRI Profile v2.2/PR.PS-01.01, CRI Profile v2.2/PR.PS-01.02
Diff
diff --git a/securityhub/latest/userguide/msk-controls.md b/securityhub/latest/userguide/msk-controls.md index 959cfe6..c286ef8 100644 --- a//securityhub/latest/userguide/msk-controls.md +++ b//securityhub/latest/userguide/msk-controls.md @@ -15 +15 @@ These AWS Security Hub CSPM controls evaluate the Amazon Managed Streaming for A -**Related requirements:** NIST.800-53.r5 AC-4, NIST.800-53.r5 SC-13, NIST.800-53.r5 SC-23, NIST.800-53.r5 SC-23(3), NIST.800-53.r5 SC-7(4), NIST.800-53.r5 SC-8, NIST.800-53.r5 SC-8(1), NIST.800-53.r5 SC-8(2), PCI DSS v4.0.1/4.2.1 +**Related requirements:** NIST.800-53.r5 AC-4, NIST.800-53.r5 SC-13, NIST.800-53.r5 SC-23, NIST.800-53.r5 SC-23(3), NIST.800-53.r5 SC-7(4), NIST.800-53.r5 SC-8, NIST.800-53.r5 SC-8(1), NIST.800-53.r5 SC-8(2), PCI DSS v4.0.1/4.2.1, CRI Profile v2.2/PR.DS-02.01 @@ -39 +39 @@ For information about updating the encryption settings for an Amazon MSK cluster -**Related requirements:** NIST.800-53.r5 CA-7, NIST.800-53.r5 SI-2 +**Related requirements:** NIST.800-53.r5 CA-7, NIST.800-53.r5 SI-2, CRI Profile v2.2/DE.AE-02.01, CRI Profile v2.2/DE.AE-03.01, CRI Profile v2.2/PR.IR-04.01, CRI Profile v2.2/PR.IR-04.02 @@ -78 +78 @@ For more information about monitoring levels, see [Amazon MSK metrics for monito -**Related requirements:** PCI DSS v4.0.1/4.2.1 +**Related requirements:** PCI DSS v4.0.1/4.2.1, CRI Profile v2.2/PR.DS-02.01, CRI Profile v2.2/PR.PS-01.06 @@ -101,0 +102,2 @@ You can enable encryption in transit when you create an MSK Connect connector. Y +**Related requirements:** CRI Profile v2.2/PR.AA-03.02, CRI Profile v2.2/PR.IR-01.01, CRI Profile v2.2/PR.PS-01.01, CRI Profile v2.2/PR.PS-01.02 + @@ -123,0 +126,2 @@ For information about managing public access to an Amazon MSK cluster, see [ Tur +**Related requirements:** CRI Profile v2.2/DE.AE-02.01, CRI Profile v2.2/DE.AE-07.02, CRI Profile v2.2/PR.PS-04.01, CRI Profile v2.2/PR.PS-04.02, CRI Profile v2.2/PR.PS-04.03, CRI Profile v2.2/RS.MA-02.01 + @@ -149,0 +154,2 @@ To enable logging for an existing Amazon MSK connector, you have to re-create th +**Related requirements:** CRI Profile v2.2/PR.AA-01.01, CRI Profile v2.2/PR.AA-02.01, CRI Profile v2.2/PR.AA-03.01, CRI Profile v2.2/PR.AA-03.02, CRI Profile v2.2/PR.AA-04.01, CRI Profile v2.2/PR.AA-05.02, CRI Profile v2.2/PR.PS-01.01 +