AWS guardduty documentation change
Summary
Updated GuardDuty security agent versions in ECR repositories and added Canada West region for Fargate agent. Modified recommendation to use latest agent version instead of specific build.
Security assessment
Change updates agent versions and provides guidance for using latest versions, but lacks explicit reference to patching vulnerabilities or addressing security incidents.
Diff
diff --git a/guardduty/latest/ug/runtime-monitoring-ecr-repository-gdu-agent.md b/guardduty/latest/ug/runtime-monitoring-ecr-repository-gdu-agent.md index 108323b99..1e15c2ab4 100644 --- a//guardduty/latest/ug/runtime-monitoring-ecr-repository-gdu-agent.md +++ b//guardduty/latest/ug/runtime-monitoring-ecr-repository-gdu-agent.md @@ -18 +18 @@ When you enable GuardDuty automated configuration for Runtime Monitoring for EKS -The following table shows the Amazon ECR repository URIs where GuardDuty security agent version 1.9.1-eks-build.2 for Amazon EKS are hosted. +The following table shows the Amazon ECR repository URIs where the GuardDuty security agent versions `1.10.0.eks.build.2`, `1.9.0.eks.build.2`, and `1.8.0.eks.build.2` for Amazon EKS are hosted. @@ -33 +33 @@ Canada West (Calgary) | `761377655185.dkr.ecr.ca-west-1.amazonaws.com` -- +– @@ -83 +83 @@ Asia Pacific (Thailand) | `121268973566.dkr.ecr.ap-southeast-7.amazonaws.com` -This section provides the Amazon ECR repository for the Amazon EKS agent version **1.8.1 (v1.8.1-eks-build.1)**. If you're using v1.8.1-eks-build.1, GuardDuty recommends switching to the default agent version **1.8.1 (v1.8.1-eks-build.2)**. To do so, perform the steps in [Updating security agent manually for Amazon EKS resources](./eksrunmon-update-security-agent.html), and choose **v1.8.1-eks-build.2** as your add-on version. +This section provides the Amazon ECR repository for the Amazon EKS agent version **1.8.1 (v1.8.1-eks-build.1)**. If you're using v1.8.1-eks-build.1, GuardDuty recommends switching to the default agent version which is usually the latest agent version. To do so, identify the latest agent from [Released agent versions for Amazon EKS resources](./runtime-monitoring-agent-release-history.html#eks-runtime-monitoring-agent-release-history), and then perform the steps in [Updating security agent manually for Amazon EKS resources](./eksrunmon-update-security-agent.html). @@ -85 +85 @@ This section provides the Amazon ECR repository for the Amazon EKS agent version -The following table shows the Amazon ECR repositories for v1.8.1-eks-build.1. +The following table shows the Amazon ECR repository URIs where GuardDuty security agent version `1.8.1-eks-build.1` for Amazon EKS is hosted. @@ -151,0 +152 @@ Asia Pacific (Thailand) | `054037130133.dkr.ecr.ap-southeast-7.amazonaws.com/aws +Canada West (Calgary) | `339712888787.dkr.ecr.ca-west-1.amazonaws.com/aws-guardduty-agent-fargate`