Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE] Remove retired AWS Security Hub controls #1192

Closed
ColinL2021 opened this issue Nov 8, 2023 · 1 comment
Closed

[FEATURE] Remove retired AWS Security Hub controls #1192

ColinL2021 opened this issue Nov 8, 2023 · 1 comment
Assignees

Comments

@ColinL2021
Copy link
Contributor

Required Basic Info
To properly assess the enhancement request, we require information on the version of the Accelerator you based this request upon:

  • Accelerator Version: v1.5.8-a

Is your feature request related to a problem? Please describe.
There are AWS Security Hub controls that have retired.
Refer to : https://docs.aws.amazon.com/securityhub/latest/userguide/doc-history.html

Retiring the Lambda.4 control:
Security Hub is retiring the control [Lambda.4] Lambda functions should have a dead-letter queue configured. When a control is retired, it no longer displays on the console, and Security Hub does not perform checks against it.

Retiring the PCI.EC2.3 control:
Security Hub is retiring the control [PCI.EC2.3] Unused EC2 security groups should be removed. When a control is retired, it no longer displays on the console, and Security Hub does not perform checks against it.

Describe the solution you'd like
A clear and concise description of what you want to happen.
Remove the controls Lambda.4 and PCI.EC2.3 from all sample configs in the "security-hub-frameworks" section under "controls-to-disable".

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
N/A

Additional context
Add any other context or screenshots about the feature request here.
N/A

@archikierstead
Copy link
Collaborator

merged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants