AWS securityhub: Add NIST 800-53 Rev.5 related requirements to Bedrock controls

Service: securityhub · 2026-10-21 · Documentation medium

File: securityhub/latest/userguide/bedrock-controls.md

Summary

Adds a 'Related requirements' line mapping the Amazon Bedrock Security Hub CSPM controls to NIST SP 800-53 Rev. 5 requirements (AU-9, CA-9(1), CM-3(6), SC-7(10), SC-12(2), SC-13, SC-28, SC-28(1), SI-7(6)).

Security assessment

Adds compliance-framework mappings (audit logging, boundary protection, cryptographic protection, data-at-rest confidentiality) for existing Bedrock security controls; documentation of security controls rather than a fix.

Evidence

+**Related requirements:** NIST.800-53.r5 AU-9, NIST.800-53.r5 CA-9(1), NIST.800-53.r5 CM-3(6), NIST.800-53.r5 SC-7(10), NIST.800-53.r5 SC-12(2), NIST.800-53.r5 SC-13, NIST.800-53.r5 SC-28, NIST.800-53.r5 SC-28(1), NIST.800-53.r5 SI-7(6)

Diff

diff --git a/securityhub/latest/userguide/bedrock-controls.md b/securityhub/latest/userguide/bedrock-controls.md
index a27fbe7..6806b6e 100644
--- a//securityhub/latest/userguide/bedrock-controls.md
+++ b//securityhub/latest/userguide/bedrock-controls.md
@@ -14,0 +15,2 @@ These AWS Security Hub CSPM controls evaluate the Amazon Bedrock service and res
+**Related requirements:** NIST.800-53.r5 AU-9, NIST.800-53.r5 CA-9(1), NIST.800-53.r5 CM-3(6), NIST.800-53.r5 SC-7(10), NIST.800-53.r5 SC-12(2), NIST.800-53.r5 SC-13, NIST.800-53.r5 SC-28, NIST.800-53.r5 SC-28(1), NIST.800-53.r5 SI-7(6)
+