AWS config: Add AWS Config managed rules to region availability lists
Summary
Adds many AWS Config managed rule links (e.g., dsql-cluster-*, msk-*, netfw-*, s3-bucket-mfa-delete-enabled, opensearch-*, ec2-launch-template-imdsv2-check, dms-endpoint-ssl-configured) to the per-region availability sections of the managing-rules-by-region-availability page, indicating which regions support each rule.
Security assessment
The diff only appends links to AWS Config managed rules into region availability lists; no vulnerability, CVE, or incident is referenced. However, the listed rules are security controls (encryption at rest/in transit, MFA delete, public access blocks, TLS enforcement, logging/audit, IMDSv2), so the page indirectly documents security best-practice checks and their regional availability.
Evidence
* [s3-bucket-mfa-delete-enabled](./s3-bucket-mfa-delete-enabled.html)
Diff
diff --git a/config/latest/developerguide/managing-rules-by-region-availability.md b/config/latest/developerguide/managing-rules-by-region-availability.md index 390262f..6ae5e6f 100644 --- a//config/latest/developerguide/managing-rules-by-region-availability.md +++ b//config/latest/developerguide/managing-rules-by-region-availability.md @@ -464,0 +465,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [dsql-cluster-deletion-protection-enabled](./dsql-cluster-deletion-protection-enabled.html) + + * [dsql-cluster-multi-region-replication-enabled](./dsql-cluster-multi-region-replication-enabled.html) + + * [dsql-cluster-tagged](./dsql-cluster-tagged.html) + @@ -2061,0 +2068,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [dsql-cluster-deletion-protection-enabled](./dsql-cluster-deletion-protection-enabled.html) + + * [dsql-cluster-multi-region-replication-enabled](./dsql-cluster-multi-region-replication-enabled.html) + + * [dsql-cluster-tagged](./dsql-cluster-tagged.html) + @@ -5105,0 +5118,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [dsql-cluster-deletion-protection-enabled](./dsql-cluster-deletion-protection-enabled.html) + + * [dsql-cluster-multi-region-replication-enabled](./dsql-cluster-multi-region-replication-enabled.html) + + * [dsql-cluster-tagged](./dsql-cluster-tagged.html) + @@ -7957,0 +7976,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [dsql-cluster-deletion-protection-enabled](./dsql-cluster-deletion-protection-enabled.html) + + * [dsql-cluster-tagged](./dsql-cluster-tagged.html) + @@ -10115,0 +10138,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [cloudfront-s3-origin-non-existent-bucket](./cloudfront-s3-origin-non-existent-bucket.html) + @@ -11148,0 +11173,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [autoscaling-launchconfig-requires-imdsv2](./autoscaling-launchconfig-requires-imdsv2.html) + @@ -11170,0 +11197,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [cloudfront-s3-origin-non-existent-bucket](./cloudfront-s3-origin-non-existent-bucket.html) + @@ -11220,0 +11249,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [dax-tls-endpoint-encryption](./dax-tls-endpoint-encryption.html) + @@ -11246,0 +11277,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [docdb-cluster-encrypted](./docdb-cluster-encrypted.html) + @@ -11248,0 +11281,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [docdb-cluster-snapshot-public-prohibited](./docdb-cluster-snapshot-public-prohibited.html) + @@ -11382,0 +11417,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [elasticache-automatic-backup-check-enabled](./elasticache-automatic-backup-check-enabled.html) + @@ -11442,0 +11479,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [glue-spark-job-supported-version](./glue-spark-job-supported-version.html) + @@ -11448,0 +11487,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [guardduty-eks-protection-runtime-enabled](./guardduty-eks-protection-runtime-enabled.html) + @@ -11520,0 +11561,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [msk-connect-connector-logging-enabled](./msk-connect-connector-logging-enabled.html) + + * [msk-enhanced-monitoring-enabled](./msk-enhanced-monitoring-enabled.html) + + * [msk-in-cluster-node-require-tls](./msk-in-cluster-node-require-tls.html) + @@ -11540,0 +11587,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [netfw-logging-enabled](./netfw-logging-enabled.html) + @@ -11632,0 +11681,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [redshift-cluster-subnet-group-multi-az](./redshift-cluster-subnet-group-multi-az.html) + @@ -11672,0 +11723,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [s3-bucket-mfa-delete-enabled](./s3-bucket-mfa-delete-enabled.html) + @@ -11696,0 +11749,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [sagemaker-endpoint-config-prod-instance-count](./sagemaker-endpoint-config-prod-instance-count.html) + + * [sagemaker-model-isolation-enabled](./sagemaker-model-isolation-enabled.html) + @@ -11752,0 +11809,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [wafv2-webacl-not-empty](./wafv2-webacl-not-empty.html) + + * [workspaces-root-volume-encryption-enabled](./workspaces-root-volume-encryption-enabled.html) + + * [workspaces-user-volume-encryption-enabled](./workspaces-user-volume-encryption-enabled.html) + @@ -11981,0 +12044,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [dsql-cluster-deletion-protection-enabled](./dsql-cluster-deletion-protection-enabled.html) + + * [dsql-cluster-tagged](./dsql-cluster-tagged.html) + @@ -13120,0 +13187,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [dsql-cluster-deletion-protection-enabled](./dsql-cluster-deletion-protection-enabled.html) + + * [dsql-cluster-multi-region-replication-enabled](./dsql-cluster-multi-region-replication-enabled.html) + + * [dsql-cluster-tagged](./dsql-cluster-tagged.html) + @@ -14211,0 +14284,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [acm-pca-root-ca-disabled](./acm-pca-root-ca-disabled.html) + @@ -14219,0 +14294,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [api-gwv2-authorization-type-configured](./api-gwv2-authorization-type-configured.html) + @@ -14223,0 +14300,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [athena-workgroup-logging-enabled](./athena-workgroup-logging-enabled.html) + @@ -14229,0 +14308,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [autoscaling-launchconfig-requires-imdsv2](./autoscaling-launchconfig-requires-imdsv2.html) + @@ -14231,0 +14312,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [autoscaling-launch-template](./autoscaling-launch-template.html) + @@ -14245,0 +14328,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [cloudformation-stack-service-role-check](./cloudformation-stack-service-role-check.html) + @@ -14247,0 +14332,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [cloudfront-s3-origin-non-existent-bucket](./cloudfront-s3-origin-non-existent-bucket.html) + @@ -14275,0 +14362,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [codebuild-report-group-encrypted-at-rest](./codebuild-report-group-encrypted-at-rest.html) + @@ -14281,0 +14370,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [cognito-user-pool-deletion-protection-enabled](./cognito-user-pool-deletion-protection-enabled.html) + @@ -14289,0 +14380,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [datasync-task-logging-enabled](./datasync-task-logging-enabled.html) + @@ -14295,0 +14388,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [dms-endpoint-ssl-configured](./dms-endpoint-ssl-configured.html) + + * [dms-mongo-db-authentication-enabled](./dms-mongo-db-authentication-enabled.html) + @@ -14315,0 +14412,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [ec2-client-vpn-connection-log-enabled](./ec2-client-vpn-connection-log-enabled.html) + @@ -14333,0 +14432,6 @@ AWS Config currently supports the following managed rules. Before using these ru + * [ec2-launch-templates-ebs-volume-encrypted](./ec2-launch-templates-ebs-volume-encrypted.html) + + * [ec2-launch-template-imdsv2-check](./ec2-launch-template-imdsv2-check.html) + + * [ec2-launch-template-public-ip-disabled](./ec2-launch-template-public-ip-disabled.html) + @@ -14355,0 +14460,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [ec2-vpn-connection-logging-enabled](./ec2-vpn-connection-logging-enabled.html) + @@ -14363,0 +14470,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [ecs-capacity-provider-termination-check](./ecs-capacity-provider-termination-check.html) + @@ -14409,0 +14518,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [elasticache-auto-minor-version-upgrade-check](./elasticache-auto-minor-version-upgrade-check.html) + @@ -14411,0 +14522,4 @@ AWS Config currently supports the following managed rules. Before using these ru + * [elasticache-repl-grp-encrypted-at-rest](./elasticache-repl-grp-encrypted-at-rest.html) + + * [elasticache-repl-grp-encrypted-in-transit](./elasticache-repl-grp-encrypted-in-transit.html) + @@ -14453,0 +14568,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [fsx-ontap-deployment-type-check](./fsx-ontap-deployment-type-check.html) + @@ -14457,0 +14574,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [fsx-windows-deployment-type-check](./fsx-windows-deployment-type-check.html) + @@ -14459,0 +14578,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [guardduty-ec2-protection-runtime-enabled](./guardduty-ec2-protection-runtime-enabled.html) + @@ -14507,0 +14628,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [msk-cluster-public-access-disabled](./msk-cluster-public-access-disabled.html) + @@ -14511,0 +14634,14 @@ AWS Config currently supports the following managed rules. Before using these ru + * [netfw-deletion-protection-enabled](./netfw-deletion-protection-enabled.html) + + * [netfw-logging-enabled](./netfw-logging-enabled.html) + + * [netfw-multi-az-enabled](./netfw-multi-az-enabled.html) + + * [netfw-policy-default-action-fragment-packets](./netfw-policy-default-action-fragment-packets.html) + + * [netfw-policy-default-action-full-packets](./netfw-policy-default-action-full-packets.html) + + * [netfw-policy-rule-group-associated](./netfw-policy-rule-group-associated.html) + + * [netfw-stateless-rule-group-not-empty](./netfw-stateless-rule-group-not-empty.html) + @@ -14521,0 +14658,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [rds-cluster-auto-minor-version-upgrade-enable](./rds-cluster-auto-minor-version-upgrade-enable.html) + @@ -14525,0 +14664,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [rds-cluster-encrypted-at-rest](./rds-cluster-encrypted-at-rest.html) + @@ -14557,0 +14698,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [rds-postgres-instance-encrypted-in-transit](./rds-postgres-instance-encrypted-in-transit.html) + @@ -14575,0 +14718,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [redshift-cluster-multi-az-enabled](./redshift-cluster-multi-az-enabled.html) + @@ -14601,0 +14746,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [s3-access-point-public-access-blocks](./s3-access-point-public-access-blocks.html) + @@ -14603,0 +14750,2 @@ AWS Config currently supports the following managed rules. Before using these ru + * [s3-bucket-acl-prohibited](./s3-bucket-acl-prohibited.html)