Document history
The following table describes significant changes to this guide. If you want to be notified about future updates, you can subscribe to an RSS feed.
Change | Description | Date |
---|---|---|
Amazon S3 bucket settings | We updated the ACCT.08 Prevent public access to private S3 buckets section to reflect that Amazon S3 buckets created after April 28, 2023 have the Block Public Access setting enabled by default. | May 18, 2023 |
IAM security best practices | We updated this guide for alignment with the latest AWS Identity and Access Management (IAM) best practices. For more information, see Security best practices in the IAM documentation. | February 1, 2023 |
IAM roles | We provided additional links to AWS service documentation in the WKLD.01 Use IAM roles for compute environment permissions section. | September 22, 2022 |
Password policy | We updated the recommendations for strong passwords to use the latest guidance from the Center for Internet Security (CIS). | May 10, 2022 |
Initial publication | — | April 13, 2022 |