AWS govcloud-us documentation change
Summary
Updated GuardDuty feature support list: added links, restructured entries, and removed 'Malware Protection for EC2' from unsupported features
Security assessment
The removal of 'Malware Protection for EC2' from the unsupported list (implied by the diff) and addition of RDS Protection links indicate documentation of newly supported security features. However, there is no evidence of addressing a specific security vulnerability.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-guardduty.md b/govcloud-us/latest/UserGuide/govcloud-guardduty.md index c6da01c85..5539ffd71 100644 --- a//govcloud-us/latest/UserGuide/govcloud-guardduty.md +++ b//govcloud-us/latest/UserGuide/govcloud-guardduty.md @@ -15 +15 @@ The following features are not supported in both the AWS GovCloud (US) Regions: - * Runtime Monitoring + * [Runtime Monitoring](https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html) (including EKS Runtime Monitoring) @@ -17,5 +17 @@ The following features are not supported in both the AWS GovCloud (US) Regions: - * EKS Runtime Monitoring - - * RDS Protection - - * Malware Protection for EC2 + * [RDS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/rds-protection.html) @@ -32 +28 @@ The following features are not supported in both the AWS GovCloud (US) Regions: -The following EKS audit log finding types are not available in the GovCloud Regions: +The following EKS audit log finding types ([EKS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html)) are not available in the AWS GovCloud (US) Regions: @@ -34 +30 @@ The following EKS audit log finding types are not available in the GovCloud Regi - * CredentialAccess:Kubernetes/AnomalousBehavior.SecretsAccessed + * [CredentialAccess:Kubernetes/AnomalousBehavior.SecretsAccessed](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-finding-types-eks-audit-logs.html#credaccess-kubernetes-anomalousbehavior-secretsaccessed) @@ -36 +32 @@ The following EKS audit log finding types are not available in the GovCloud Regi - * PrivilegeEscalation:Kubernetes/AnomalousBehavior.RoleBindingCreated + * [PrivilegeEscalation:Kubernetes/AnomalousBehavior.RoleBindingCreated](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-finding-types-eks-audit-logs.html#privesc-kubernetes-anomalousbehavior-rolebindingcreated) @@ -38 +34 @@ The following EKS audit log finding types are not available in the GovCloud Regi - * Execution:Kubernetes/AnomalousBehavior.ExecInPod + * [Execution:Kubernetes/AnomalousBehavior.ExecInPod](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-finding-types-eks-audit-logs.html#execution-kubernetes-anomalousbehvaior-execinprod) @@ -40 +36 @@ The following EKS audit log finding types are not available in the GovCloud Regi - * PrivilegeEscalation:Kubernetes/AnomalousBehavior.WorkloadDeployed!PrivilegedContainer + * [PrivilegeEscalation:Kubernetes/AnomalousBehavior.WorkloadDeployed!PrivilegedContainer](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-finding-types-eks-audit-logs.html#privesc-kubernetes-anomalousbehavior-workloaddeployed-privcontainer) @@ -42 +38 @@ The following EKS audit log finding types are not available in the GovCloud Regi - * PrivilegeEscalation:Kubernetes/AnomalousBehavior.WorkloadDeployed!ContainerWithSensitiveMount + * [Persistence:Kubernetes/AnomalousBehavior.WorkloadDeployed!ContainerWithSensitiveMount](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-finding-types-eks-audit-logs.html#privesc-kubernetes-anomalousbehavior-workloaddeployed-containerwithsensitivemount) @@ -44 +40 @@ The following EKS audit log finding types are not available in the GovCloud Regi - * Execution:Kubernetes/AnomalousBehavior.WorkloadDeployed + * [Execution:Kubernetes/AnomalousBehavior.WorkloadDeployed](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-finding-types-eks-audit-logs.html#exec-kubernetes-anomalousbehavior-workloaddeployed) @@ -46 +42 @@ The following EKS audit log finding types are not available in the GovCloud Regi - * PrivilegeEscalation:Kubernetes/AnomalousBehavior.RoleCreated + * [PrivilegeEscalation:Kubernetes/AnomalousBehavior.RoleCreated](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-finding-types-eks-audit-logs.html#privesc-kubernetes-anomalousbehavior-rolecreated) @@ -48 +44 @@ The following EKS audit log finding types are not available in the GovCloud Regi - * Discovery:Kubernetes/AnomalousBehavior.PermissionChecked + * [Discovery:Kubernetes/AnomalousBehavior.PermissionChecked](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-finding-types-eks-audit-logs.html#privesc-kubernetes-anomalousbehavior-rolecreated)