AWS securityhub: Add CRI Profile v2.2 mappings to Secrets Manager Security Hub controls
Summary
Appends CRI Profile v2.2 requirement identifiers (PR.AA-01.01, PR.AA-05.01, PR.AA-05.03) to the 'Related requirements' lines of several AWS Secrets Manager Security Hub CSPM controls covering secret rotation and deletion of inactive secrets. No control descriptions or remediation guidance are modified.
Security assessment
The diff only adds CRI Profile v2.2 compliance framework tags to existing 'Related requirements' metadata for Secrets Manager controls. Although the surrounding controls concern secret rotation and credential lifecycle, the change itself introduces no new security guidance, control logic, or vulnerability reference.
Evidence
+**Related requirements:** NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3(15), PCI DSS v4.0.1/8.6.3, PCI DSS v4.0.1/8.3.9, CRI Profile v2.2/PR.AA-01.01
Diff
diff --git a/securityhub/latest/userguide/secretsmanager-controls.md b/securityhub/latest/userguide/secretsmanager-controls.md index a16620c..80a81fe 100644 --- a//securityhub/latest/userguide/secretsmanager-controls.md +++ b//securityhub/latest/userguide/secretsmanager-controls.md @@ -17 +17 @@ These controls may not be available in all AWS Regions. For more information, se -**Related requirements:** NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3(15), PCI DSS v4.0.1/8.6.3, PCI DSS v4.0.1/8.3.9 +**Related requirements:** NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3(15), PCI DSS v4.0.1/8.6.3, PCI DSS v4.0.1/8.3.9, CRI Profile v2.2/PR.AA-01.01 @@ -47 +47 @@ To turn on automatic rotation for Secrets Manager secrets, see [Set up automatic -**Related requirements:** NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3(15), PCI DSS v4.0.1/8.6.3, PCI DSS v4.0.1/8.3.9 +**Related requirements:** NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3(15), PCI DSS v4.0.1/8.6.3, PCI DSS v4.0.1/8.3.9, CRI Profile v2.2/PR.AA-01.01 @@ -79 +79 @@ For help diagnosing and fixing common errors related to secrets rotation, see [T -**Related requirements:** NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3(15) +**Related requirements:** NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3(15), CRI Profile v2.2/PR.AA-01.01, CRI Profile v2.2/PR.AA-05.01, CRI Profile v2.2/PR.AA-05.03 @@ -107 +107 @@ To delete inactive Secrets Manager secrets, see [Delete an AWS Secrets Manager s -**Related requirements:** NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3(15), PCI DSS v4.0.1/8.6.3, PCI DSS v4.0.1/8.3.9 +**Related requirements:** NIST.800-53.r5 AC-2(1), NIST.800-53.r5 AC-3(15), PCI DSS v4.0.1/8.6.3, PCI DSS v4.0.1/8.3.9, CRI Profile v2.2/PR.AA-01.01