AWS securityhub documentation changes
- List Bedrock.1 and SageMaker encryption controls under NIST 800-53
- Add NIST 800-53 Rev.5 standard to KMS encryption controls reference
- Add NIST 800-53 related requirements to SageMaker encryption controls
- Add SageMaker and Bedrock AgentCore controls to FSBP standard list
- Fix next-page navigation link text on SageMaker notebook exposure page
- Fix next-page navigation link text on Azure VM exposure page
- Document 8 new Security Hub CSPM controls (Bedrock, SageMaker, AgentCore)
- Add NIST 800-53 Rev.5 related requirements to Bedrock controls
- Add CRI Profile v2.2 mappings to Security Hub WorkSpaces controls
- Add CRI Profile v2.2 mappings to Security Hub WAF controls
- Add CRI Profile v2.2 requirement mappings to Transfer Family controls
- Add CRI Profile v2.2 requirement mappings to Step Functions controls
- Document new CRI Profile v2.2 Security Hub standard
- Add CRI Profile v2.2 requirement mappings to SSM controls
- Add CRI Profile v2.2 requirement mappings to SQS controls
- Add CRI Profile v2.2 requirements to SNS controls
- Add CRI Profile v2.2 requirements to Service Catalog control
- Swap PCI DSS for CRI Profile v2.2 in managed standards list
- Add resource rules and finding rules to Security Hub automation rules
- Add procedure for automation rule that updates resource criticality
- Rename AI inventory section label from 'Exposure findings' to 'Resources'
- Add CRI Profile v2.2 to Security Hub controls standards mapping
- Add CRI Profile v2.2 mappings to Secrets Manager Security Hub controls
- Add CRI Profile v2.2 mappings to SageMaker Security Hub controls
- Add CRI Profile v2.2 mappings to S3 Security Hub controls
- Add CRI Profile v2.2 mappings to Route 53 controls
- Add CRI Profile v2.2 mappings to Redshift Serverless controls
- Add CRI Profile v2.2 mappings to Redshift Security Hub controls
- Add CRI Profile v2.2 framework mappings to RDS Security Hub controls
- Replace 'Service-managed standards' entry with 'CRI Profile v2.2' in PCI standard page
- Add CRI Profile v2.2 mapping to PCA Security Hub controls
- Add CRI Profile v2.2 mappings to OpenSearch Security Hub controls
- Add CRI Profile v2.2 mappings to Network Firewall Security Hub controls
- Add CRI Profile v2.2 requirement mappings to Neptune controls
- Add CRI Profile v2.2 mappings to Amazon MSK Security Hub controls
- Add CRI Profile v2.2 mappings to Amazon MQ Security Hub controls
- Add CRI Profile v2.2 mappings to Macie Security Hub controls
- Add CRI Profile v2.2 mappings to Lambda Security Hub controls
- Add CRI Profile v2.2 mappings to KMS Security Hub controls
- Add CRI Profile v2.2 mappings to Kinesis controls
- Add CRI Profile v2.2 mappings to Keyspaces controls
- Add CRI Profile v2.2 mappings to IVS controls
- Add CRI Profile v2.2 mappings to IoT TwinMaker controls
- Add CRI Profile v2.2 mappings to Security Hub Inspector controls
- Add CRI Profile v2.2 mappings to Security Hub IAM controls
- Add CRI Profile v2.2 compliance mappings to GuardDuty controls
- Add CRI Profile v2.2 mappings to AWS Glue Security Hub controls
- Add CRI Profile v2.2 mappings to FSx Security Hub controls
- Add business criticality to SageMaker notebook exposure impact traits
- Add business criticality to Lambda function exposure impact traits
- Add business criticality to IAM user exposure impact traits
- Security Hub: add resource criticality to exposure findings docs
- Security Hub: add Criticality trait and expand Impact trait docs
- Document business criticality in ECS service exposure impact traits
- Document business criticality in EC2 exposure impact traits
- Add CRI Profile v2.2 mappings to EventBridge Security Hub controls
- Add CRI Profile v2.2 mappings to OpenSearch/Elasticsearch controls
- Add CRI Profile v2.2 mappings to EMR Security Hub controls
- Add CRI Profile v2.2 mappings to Security Hub ELB controls
- Add CRI Profile v2.2 mappings to Elastic Beanstalk controls
- Add CRI Profile v2.2 mappings to ElastiCache Security Hub controls
- Add CRI Profile v2.2 mappings to Amazon EKS Security Hub controls
- Add CRI Profile v2.2 mappings to Amazon EFS Security Hub controls
- Add CRI Profile v2.2 mappings to ECS Security Hub controls
- Add CRI Profile v2.2 mappings to ECR Security Hub controls
- Add CRI Profile v2.2 mappings and refine EC2 launch template public IP control
- Add CRI Profile v2.2 mappings to DynamoDB Security Hub controls
- Add CRI Profile v2.2 mappings to DocumentDB Security Hub controls
- Document new CRI Profile v2.2 standard and automation rule updates
- Add CRI Profile v2.2 mappings to DMS Security Hub controls
- Add CRI Profile v2.2 mappings to AWS DataSync controls
- Add CRI Profile v2.2 requirements to Firehose controls page
- Add CRI Profile v2.2 mapping to Amazon Connect controls
- Add CRI Profile v2.2 requirements to AWS Config controls page
- Add CRI Profile v2.2 mappings to Amazon Cognito Security Hub controls
- Add CRI Profile v2.2 requirement mapping to CodeGuru Reviewer controls
- Add CRI Profile v2.2 requirement mapping to CodeGuru Profiler controls
- Add CRI Profile v2.2 requirement mappings to CodeBuild controls
- Add CRI Profile v2.2 mappings to CloudWatch Security Hub controls
- Add CRI Profile v2.2 mappings to CloudTrail Security Hub controls
- Add CRI Profile v2.2 mappings to CloudFront Security Hub controls
- Add CRI Profile v2.2 mappings to AWS Batch Security Hub controls
- Add CRI Profile v2.2 mapping to AWS Backup Security Hub control
- Add CRI Profile v2.2 mappings to Auto Scaling Security Hub controls
- Add CRI Profile v2.2 mapping to Athena Security Hub control
- Add CRI Profile v2.2 mappings to AppSync Security Hub controls
- Add CRI Profile mappings to Security Hub App Runner controls
- Add CRI Profile mappings to Security Hub AppFlow controls
- Add CRI Profile mappings to Security Hub API Gateway controls
- Add CRI Profile mappings to Security Hub Amplify controls
- Add CRI Profile mappings to Security Hub ACM controls
- Add CRI Profile mappings to Security Hub account controls
- Remove EKS.3 reference from NIST 800-53 standards list
- Remove retired SNS.2 delivery status logging control
- Rename nav link to Exporting findings
- Rename nav link to Exporting findings
- Remove retired EKS.3 encrypted Kubernetes secrets control row
- Remove AppSync and EKS encryption controls from unsupported-region lists
- Remove EKS.3 encrypted secrets control from PCI DSS mapping list
- Clarify multi-account failure logic for Inspector scanning controls