AWS guardduty documentation change
Summary
Updated agent version from 1.6.0 to 1.7.0 in installation paths and fixed a typo in download instructions
Security assessment
Version update reflects routine maintenance without explicit mention of security fixes. Typo correction improves clarity but doesn't introduce security content
Diff
diff --git a/guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md b/guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md index b2e97fbc6..58421ee16 100644 --- a//guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md +++ b//guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md @@ -77 +77 @@ With this method, you can install the GuardDuty security agent by running RPM sc - * Use Debian scripts to install the security agent on OS distributions Ubuntu or Debian. For information about supported Ubuntu and Debian OS distributions, see [Validating architectural requirements](./prereq-runtime-monitoring-ec2-support.html#validating-architecture-req-ec2). + * Use Debian scripts to install the security agent on OS distributions Ubuntu or Debian. For information about supported Ubuntu and Debian OS distributions, see [Validate architectural requirements](./prereq-runtime-monitoring-ec2-support.html#validating-architecture-req-ec2). @@ -97 +97 @@ Prepare the commands with appropriate public key, signature of x86_64 RPM, signa - s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.6.0/publickey.pem + s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.0/publickey.pem @@ -104 +104 @@ Signature of x86_64 RPM - s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.6.0/x86_64/amazon-guardduty-agent-1.6.0.x86_64.sig + s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.0/x86_64/amazon-guardduty-agent-1.7.0.x86_64.sig @@ -109 +109 @@ Signature of arm64 RPM - s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.6.0/arm64/amazon-guardduty-agent-1.6.0.arm64.sig + s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.0/arm64/amazon-guardduty-agent-1.7.0.arm64.sig @@ -116 +116 @@ Access link for x86_64 RPM - s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.6.0/x86_64/amazon-guardduty-agent-1.6.0.x86_64.rpm + s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.0/x86_64/amazon-guardduty-agent-1.7.0.x86_64.rpm @@ -121 +121 @@ Access link for arm64 RPM - s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.6.0/arm64/amazon-guardduty-agent-1.6.0.arm64.rpm + s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.0/arm64/amazon-guardduty-agent-1.7.0.arm64.rpm @@ -160,3 +160,3 @@ In the following command to download appropriate public key, signature of x86_64 - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.6.0/x86_64/amazon-guardduty-agent-1.6.0.x86_64.rpm ./amazon-guardduty-agent-1.6.0.x86_64.rpm - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.6.0/x86_64/amazon-guardduty-agent-1.6.0.x86_64.sig ./amazon-guardduty-agent-1.6.0.x86_64.sig - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.6.0/publickey.pem ./publickey.pem + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.0/x86_64/amazon-guardduty-agent-1.7.0.x86_64.rpm ./amazon-guardduty-agent-1.7.0.x86_64.rpm + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.0/x86_64/amazon-guardduty-agent-1.7.0.x86_64.sig ./amazon-guardduty-agent-1.7.0.x86_64.sig + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.0/publickey.pem ./publickey.pem @@ -181 +181 @@ Use the following command to verify the signature - gpg --verify amazon-guardduty-agent-1.6.0.x86_64.sig amazon-guardduty-agent-1.6.0.x86_64.rpm + gpg --verify amazon-guardduty-agent-1.7.0.x86_64.sig amazon-guardduty-agent-1.7.0.x86_64.rpm @@ -210 +210 @@ Now, try the verification process again. - sudo rpm -ivh amazon-guardduty-agent-1.6.0.x86_64.rpm + sudo rpm -ivh amazon-guardduty-agent-1.7.0.x86_64.rpm @@ -232 +232 @@ In the following templates, replace the value of the AWS Region, AWS account ID, - s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.6.0/publickey.pem + s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.0/publickey.pem @@ -239 +239 @@ Signature of amd64 - s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.6.0/amd64/amazon-guardduty-agent-1.6.0.amd64.sig + s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.0/amd64/amazon-guardduty-agent-1.7.0.amd64.sig @@ -244 +244 @@ Signature of arm64 - s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.6.0/arm64/amazon-guardduty-agent-1.6.0.arm64.sig + s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.0/arm64/amazon-guardduty-agent-1.7.0.arm64.sig @@ -251 +251 @@ Access link for amd64 - s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.6.0/amd64/amazon-guardduty-agent-1.6.0.amd64.deb + s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.0/amd64/amazon-guardduty-agent-1.7.0.amd64.deb @@ -256 +256 @@ Access link for arm64 - s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.6.0/arm64/amazon-guardduty-agent-1.6.0.arm64.deb + s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.0/arm64/amazon-guardduty-agent-1.7.0.arm64.deb @@ -290 +290 @@ AWS Region | Region name | AWS account ID - 2. ###### Download the download appropriate public key, signature of amd64, signature of arm64, and the corresponding access link to the Debian scripts hosted in Amazon S3 buckets + 2. ###### Download the appropriate public key, signature of amd64, signature of arm64, and the corresponding access link to the Debian scripts hosted in Amazon S3 buckets @@ -294,3 +294,3 @@ In the following commands, replace the account ID with the appropriate AWS accou - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.6.0/amd64/amazon-guardduty-agent-1.6.0.amd64.deb ./amazon-guardduty-agent-1.6.0.amd64.deb - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.6.0/amd64/amazon-guardduty-agent-1.6.0.amd64.sig ./amazon-guardduty-agent-1.6.0.amd64.sig - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.6.0/publickey.pem ./publickey.pem + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.0/amd64/amazon-guardduty-agent-1.7.0.amd64.deb ./amazon-guardduty-agent-1.7.0.amd64.deb + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.0/amd64/amazon-guardduty-agent-1.7.0.amd64.sig ./amazon-guardduty-agent-1.7.0.amd64.sig + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.0/publickey.pem ./publickey.pem @@ -311 +311 @@ gpg shows import successfully - gpg --verify amazon-guardduty-agent-1.6.0.amd64.sig amazon-guardduty-agent-1.6.0.amd64.deb + gpg --verify amazon-guardduty-agent-1.7.0.amd64.sig amazon-guardduty-agent-1.7.0.amd64.deb @@ -342 +342 @@ Now, retry the verification process. - sudo dpkg -i amazon-guardduty-agent-1.6.0.amd64.deb + sudo dpkg -i amazon-guardduty-agent-1.7.0.amd64.deb