AWS securityhub: Add CRI Profile v2.2 requirements to Service Catalog control
Summary
Extends the 'Related requirements' line of an AWS Service Catalog Security Hub CSPM control with two CRI Profile v2.2 mappings (PR.AA-04.01, PR.PS-01.01).
Security assessment
Only compliance-framework cross-references were appended to an existing control's metadata; no control logic, remediation guidance, or vulnerability detail changed.
Evidence
+**Related requirements:** NIST.800-53.r5 AC-3, NIST.800-53.r5 AC-4, NIST.800-53.r5 AC-6, NIST.800-53.r5 CM-8, NIST.800-53.r5 SC-7, CRI Profile v2.2/PR.AA-04.01, CRI Profile v2.2/PR.PS-01.01
Diff
diff --git a/securityhub/latest/userguide/servicecatalog-controls.md b/securityhub/latest/userguide/servicecatalog-controls.md index efc154e..0c644a4 100644 --- a//securityhub/latest/userguide/servicecatalog-controls.md +++ b//securityhub/latest/userguide/servicecatalog-controls.md @@ -15 +15 @@ This AWS Security Hub CSPM control evaluates the AWS Service Catalog service and -**Related requirements:** NIST.800-53.r5 AC-3, NIST.800-53.r5 AC-4, NIST.800-53.r5 AC-6, NIST.800-53.r5 CM-8, NIST.800-53.r5 SC-7 +**Related requirements:** NIST.800-53.r5 AC-3, NIST.800-53.r5 AC-4, NIST.800-53.r5 AC-6, NIST.800-53.r5 CM-8, NIST.800-53.r5 SC-7, CRI Profile v2.2/PR.AA-04.01, CRI Profile v2.2/PR.PS-01.01