AWS securityhub: Document 8 new Security Hub CSPM controls (Bedrock, SageMaker, AgentCore)
Summary
Adds a doc-history entry announcing 8 new controls: Bedrock.1, SageMaker.21/23/24 in the NIST SP 800-53 Rev.5 standard, and SageMaker.20/22/25 plus BedrockAgentCore.7 in the FSBP standard.
Security assessment
Announces new detection controls covering network isolation and inter-container traffic encryption for SageMaker/Bedrock workloads; it is security-control documentation, not a patch for a specific vulnerability.
Evidence
+Updates to security controls| Security Hub CSPM added 8 controls to standards. Security Hub CSPM added [Bedrock.1](https://docs.aws.amazon.com/securityhub/latest/userguide/bedrock-controls.html#bedrock-1), [SageMaker.21](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-21), [SageMaker.23](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-23), and [SageMaker.24](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-24) to the [NIST SP 800-53 Rev. 5 standard](https://docs.aws.amazon.com/securityhub/latest/userguide/nist-standard.html). Security Hub CSPM added [SageMaker.20](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-20), [SageMaker.22](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-22), [SageMaker.25](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-25), and [BedrockAgentCore.7](https://docs.aws.amazon.com/securityhub/latest/userguide/bedrockagentcore-controls.html#bedrockagentcore-7) to the [AWS Foundational Security Best Practices (FSBP) standard](https://docs.aws.amazon.com/securityhub/latest/userguide/fsbp-standard.html).| October 20, 2026
Diff
diff --git a/securityhub/latest/userguide/doc-history.md b/securityhub/latest/userguide/doc-history.md index ed20662..d3a9c86 100644 --- a//securityhub/latest/userguide/doc-history.md +++ b//securityhub/latest/userguide/doc-history.md @@ -14,0 +15 @@ Change| Description| Date +Updates to security controls| Security Hub CSPM added 8 controls to standards. Security Hub CSPM added [Bedrock.1](https://docs.aws.amazon.com/securityhub/latest/userguide/bedrock-controls.html#bedrock-1), [SageMaker.21](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-21), [SageMaker.23](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-23), and [SageMaker.24](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-24) to the [NIST SP 800-53 Rev. 5 standard](https://docs.aws.amazon.com/securityhub/latest/userguide/nist-standard.html). Security Hub CSPM added [SageMaker.20](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-20), [SageMaker.22](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-22), [SageMaker.25](https://docs.aws.amazon.com/securityhub/latest/userguide/sagemaker-controls.html#sagemaker-25), and [BedrockAgentCore.7](https://docs.aws.amazon.com/securityhub/latest/userguide/bedrockagentcore-controls.html#bedrockagentcore-7) to the [AWS Foundational Security Best Practices (FSBP) standard](https://docs.aws.amazon.com/securityhub/latest/userguide/fsbp-standard.html).| October 20, 2026