Yes, it's the 7th tie breaking criteria. It's new. Previously, criteria #7 was drawing slots, which is now #8 (and last).
Interesting, neither Spain nor Portugal can take it easy next match. If Portugal lose, they're out (unless Spain also lose by a greater goal difference or same goal difference but score fewer goals OR get more cumulative bookings than Portugal). If Spain lose and Portugal win, they're in. If Spain lose and Portugal and Iran draw (or the scenarios mentioned before happen), Spain are out. No one is safe in group B. Morocco are out. Everyone else is still fighting and no one is guaranteed anything.
Group A has been decided. Now we need to see who qualifies first and who qualifies second. I wonder if Uruguay will take it easy in order to save energy for the knockout stage. Uruguay needs to win to take #1, Russia needs to draw or win to take #1.