AWS Security ChangesHomeSearch

AWS config: Update Resource Config coverage table

Service: config · 2026-11-10 · Documentation low

File: config/latest/developerguide/what-is-resource-config-coverage.md

Summary

Updates AWS Config resource coverage table entries for BedrockAgentCore ResourcePolicy, DevOpsAgent AgentSpace, and NetworkFirewall FirewallPolicyV2.

Security assessment

The change only updates resource coverage matrix values for supported AWS resource types; it does not describe a vulnerability, incident, or security control.

Evidence

+AWS::NetworkFirewall::FirewallPolicyV2 |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   

Diff

diff --git a/config/latest/developerguide/what-is-resource-config-coverage.md b/config/latest/developerguide/what-is-resource-config-coverage.md
index 2f48256..ff6e000 100644
--- a//config/latest/developerguide/what-is-resource-config-coverage.md
+++ b//config/latest/developerguide/what-is-resource-config-coverage.md
@@ -126 +126 @@ AWS::BedrockAgentCore::PolicyEngine |  Yes  |  No  |  No  |  Yes  |  Yes  |  Yes
-AWS::BedrockAgentCore::ResourcePolicy |  Yes  |  No  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
+AWS::BedrockAgentCore::ResourcePolicy |  Yes  |  No  |  No  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
@@ -245,0 +246 @@ AWS::Detective::OrganizationAdmin |  Yes  |  No  |  No  |  Yes  |  Yes  |  Yes
+AWS::DevOpsAgent::AgentSpace |  Yes  |  No  |  No  |  Yes  |  Yes  |  Yes  |  No  |  Yes   
@@ -548,0 +550 @@ AWS::NetworkFirewall::FirewallPolicy |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |
+AWS::NetworkFirewall::FirewallPolicyV2 |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -923 +925 @@ AWS::BedrockAgentCore::PolicyEngine |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Ye
-AWS::BedrockAgentCore::ResourcePolicy |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
+AWS::BedrockAgentCore::ResourcePolicy |  Yes  |  No  |  Yes  |  No  |  No  |  Yes  |  Yes  |  Yes   
@@ -1032,0 +1035 @@ AWS::Detective::OrganizationAdmin |  Yes  |  No  |  Yes  |  Yes  |  No  |  Yes
+AWS::DevOpsAgent::AgentSpace |  Yes  |  No  |  Yes  |  No  |  No  |  Yes  |  Yes  |  Yes   
@@ -1320,0 +1324 @@ AWS::NetworkFirewall::FirewallPolicy |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |
+AWS::NetworkFirewall::FirewallPolicyV2 |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -1651 +1655 @@ AWS::BedrockAgentCore::PolicyEngine |  No  |  No  |  Yes  |  Yes  |  No  |  Yes
-AWS::BedrockAgentCore::ResourcePolicy |  No  |  No  |  Yes  |  Yes  |  No  |  Yes  |  Yes  |  Yes  |  Yes  |  No  |  No  |  Yes  |  No  |  Yes   
+AWS::BedrockAgentCore::ResourcePolicy |  No  |  No  |  Yes  |  Yes  |  No  |  Yes  |  No  |  Yes  |  Yes  |  No  |  No  |  No  |  No  |  No   
@@ -1759,0 +1764 @@ AWS::Detective::OrganizationAdmin |  Yes  |  No  |  Yes  |  Yes  |  No  |  Yes
+AWS::DevOpsAgent::AgentSpace |  No  |  No  |  Yes  |  Yes  |  No  |  Yes  |  No  |  Yes  |  Yes  |  No  |  No  |  No  |  No  |  No   
@@ -2047,0 +2053 @@ AWS::NetworkFirewall::FirewallPolicy |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |
+AWS::NetworkFirewall::FirewallPolicyV2 |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes  |  Yes   
@@ -2506,0 +2513 @@ AWS::NetworkFirewall::FirewallPolicy |  Yes  |  Yes
+AWS::NetworkFirewall::FirewallPolicyV2 |  Yes  |  Yes   
@@ -2707,2 +2713,0 @@ AWS::Bedrock::Guardrail |  No  |  Yes  |  Yes  |  No
-AWS::BedrockAgentCore::Policy |  No  |  Yes  |  No  |  No   
-AWS::BedrockAgentCore::PolicyEngine |  No  |  Yes  |  No  |  No   
@@ -3014,0 +3020 @@ AWS::NetworkFirewall::FirewallPolicy |  Yes  |  Yes  |  Yes  |  Yes
+AWS::NetworkFirewall::FirewallPolicyV2 |  Yes  |  Yes  |  Yes  |  Yes   
@@ -3484,0 +3491 @@ AWS::NetworkFirewall::FirewallPolicy |  Yes  |  Yes
+AWS::NetworkFirewall::FirewallPolicyV2 |  Yes  |  Yes