AWS eventbridge documentation change
Summary
Simplified GuardDuty event documentation to only mention CloudTrail delivery, removing direct EventBridge events and specific finding types
Security assessment
Changes event delivery method documentation but doesn't address vulnerabilities or add security features. Reduces visibility into specific security findings
Diff
diff --git a/eventbridge/latest/ref/events-ref-guardduty.md b/eventbridge/latest/ref/events-ref-guardduty.md index 83b65f062..9dfed1bdc 100644 --- a//eventbridge/latest/ref/events-ref-guardduty.md +++ b//eventbridge/latest/ref/events-ref-guardduty.md @@ -5 +5 @@ -Service eventsEvents via CloudTrail +Events via CloudTrail @@ -9,48 +9 @@ Service eventsEvents via CloudTrail -GuardDuty sends service events directly to EventBridge, as well as via AWS CloudTrail. - -## GuardDuty service events - -GuardDuty sends the following events directly to EventBridge: - - * GuardDuty Finding - - * GuardDuty Runtime Protection Healthy - - * GuardDuty Runtime Protection Unhealthy - - * GuardDuty Malware Protection Object Scan Result - - * GuardDuty Malware Protection Resource Status Active - - * GuardDuty Malware Protection Resource Status Warning - - * GuardDuty Malware Protection Resource Status Error - - * GuardDuty Malware Protection Post Scan Action Failed - - - - -_Delivery type_ : [ Best effort ](./event-delivery-level.html) - -To match against all events from this service, create an event pattern that matches against the following event attribute: - - * `source`: aws.guardduty - - - - - - { - "source": ["aws.guardduty"] - } - -To match against specific events, include a `detail-type` attribute specifying an array of event names to match. For example: - - - { - "source": ["aws.guardduty"], - "detail-type": ["GuardDuty Finding"] - } - -For more information, see [Creating event patterns](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-patterns.html#eb-create-pattern) in the _Amazon EventBridge User Guide_. +GuardDuty sends service events to EventBridge via AWS CloudTrail.