[Enhancement] Add fix/remediation descriptions to AWS Config → HDF output

[clem-field]

Summary

The AWS Config mapper produces HDF controls with only a check description. Adding a fix (remediation) description would make the output more robust and actionable — parity with the check/fix language HDF supports elsewhere.

Current behavior

libs/hdf-converters/src/aws-config-mapper.ts — hdfDescriptions() (~L363) emits a single check entry:

private hdfDescriptions(configRule: ConfigRule) {
  return [{ data: this.checkText(configRule), label: 'check' }];
}

There is no fix/remediation text, so reviewers get "how it was evaluated" but no "how to remediate."

Proposed

• Add a { label: 'fix', data: ... } description built from available remediation signals — e.g. AWS Config remediation configuration (SSM Automation document / RemediationConfiguration) when present, and/or a rule-keyed remediation lookup for managed rules.
• Keep it graceful when no remediation is available (omit or emit a neutral placeholder).

Related

• Companion enhancement on hdf-libs: [Enhancement] Add fix/remediation description to AWS Config → HDF converter hdf-libs#165 (its converter emits default+check, no fix).
• Coverage/Rev-5 re-baseline tracked separately in [Enhancement] Expand AWS Config NIST mapping coverage & re-baseline to 800-53 Rev 5 #8460.