# What's New | December 2025

> Tidal's December 2025 release adds 47 new AWS security tests covering IAM, KMS, Secrets Manager, and CloudWatch, following AWS Security Hub controls. Users can now link existing Jira tickets directly to Tidal Tasks and Issues to avoid duplicate work. A new Required Documents feature supports versioning and lifecycle management for recurring compliance evidence such as DPIA forms and ISO 27001 management review minutes. The release also includes Controls page performance improvements and fixes for GitHub, Azure app integration redirects, and Azure tests.

Source: https://tidalcontrol.com/blog/what-s-new-december-2025
Published: 2025-12-24

Hi, welcome back to the Tidal Product Update newsletter. For the last newsletter of the year we have more updates to finish the year strong: expanded AWS security coverage, deeper Jira integration, new document management features, and performance improvements!

This release includes:

- 47 New AWS Security Tests
- Link Existing Jira Tickets to Tidal Tasks
- Required Documents in Tidal Control
- Performance & Integration Improvements

For more information and visuals of the updates, check out the What's New section in your Tidal app.

## 47 New AWS Security Tests

*Comprehensive coverage across [IAM](/glossary/iam-identity-and-access-management), KMS, Secrets Manager, and CloudWatch*

We've added 47 new AWS tests following AWS Security Hub controls to help you strengthen your cloud [security posture](/glossary/security-posture).

### IAM (20 Tests)

Including:

- Policy security: no full admin privileges, no wildcards, no direct attachments
- Access [key management](/glossary/key-management): rotation every 90 days, detection of unused credentials
- [MFA](/glossary/mfa-multi-factor-authentication) enforcement for console users, root account, hardware MFA for root
- Password policies: complexity, expiration, reuse prevention
- Resource tagging for roles, and users
- CloudShell access controls and SSL certificate management

### KMS (5 Tests)

Validating:

- IAM restrictions on decryption
- Key rotation enablement
- Deletion prevention and public access controls

### Secrets Manager (5 Tests)

Checking:

- Automatic rotation and rotation success validation
- Detection of unused secrets
- Rotation frequency compliance and secret tagging

### CloudWatch (17 Tests)

Monitoring and alerting for:

- Critical security events, including unauthorized API calls, IAM policy changes, S3 and CloudTrail changes, and VPC/network modifications
- Alarm actions and log group retention configuration

This update brings you stronger, automated AWS security checks for a safer cloud environment.

## Link Existing Jira Tickets to Tidal Tasks

*Better integration with your existing workflows*

You can now link existing Jira tickets directly to Tidal Tasks and Issues. Simply open a Task or Issue, click the link icon, and enter the Jira ticket ID.

Benefits:

- Connect ongoing work in Jira with compliance activities in Tidal Control
- Avoid creating duplicate Jira issues
- Keep all stakeholders aligned across platforms

## Required Documents in Tidal Control

*Easier [document management](/glossary/document-management) for compliance*

We've introduced Required Documents, making it simpler to upload, manage, and track recurring compliance evidence such as DPIA forms, audit reports, and [ISO 27001](/frameworks/iso27001) [management review](/glossary/management-review) minutes.

Key features:

- Versioning and lifecycle management like Policies
- Fast, simple uploads similar to Evidence
- Link each document to controls via corresponding tests for automated compliance checks

Manage Required Documents on the new Documents page, while the Evidence page continues to provide a complete overview of all uploaded files.

## Performance & Integration Improvements

### Performance improvements

The Controls page now remains responsive even after prolonged use, eliminating browser unresponsiveness.

### Fixed: GitHub and Azure app integration redirect

Users are now correctly redirected after completing integration setup.

### Fixed: Azure tests

Several Azure tests that previously caused errors have been corrected.

---

As 2025 comes to a close, we want to thank you for your continued partnership. We've made great progress together this year in strengthening compliance, improving workflows, and increasing security automation. Stay tuned for next year, we have big plans in store!

From Team Tidal we wish you pleasant holidays, and a great 2026!

For questions, feel free to reach out by email or on LinkedIn. Want insight into your compliance status? [Take the free quick scan](/quickscan). Prefer to speak with our compliance team? [Book an introductory call](/lp/demo).

PS: If you liked this newsletter, you can share it with your colleagues through the sign up link here.