AWS guardduty high security documentation change
Summary
Added documentation for AmazonGuardDutyFullAccess_v2 policy, expanded RDS Protection regions, and updated Runtime Monitoring agent version
Security assessment
The AmazonGuardDutyFullAccess_v2 policy explicitly restricts administrative actions to GuardDuty service principals, which directly addresses security by enforcing least privilege. This is a security-focused policy update.
Diff
diff --git a/guardduty/latest/ug/doc-history.md b/guardduty/latest/ug/doc-history.md index 22bcf8a31..c31de2fa4 100644 --- a//guardduty/latest/ug/doc-history.md +++ b//guardduty/latest/ug/doc-history.md @@ -12,0 +13,3 @@ Change| Description| Date +New AmazonGuardDutyFullAccess_v2 policy| Added a new AmazonGuardDutyFullAccess_v2 policy with permissions to enhance security by restricting administrative actions to GuardDuty service principals. For information about this recommended policy, see [AWS managed policy: AmazonGuardDutyFullAccess_v2](https://docs.aws.amazon.com/guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonGuardDutyFullAccess-v2).| June 4, 2025 +Expanded Region support for RDS Protection| GuardDuty RDS Protection is now available in Mexico (Central), Asia Pacific (Thailand), and Asia Pacific (Malaysia) Regions. RDS Protection helps you detect potentially suspicious login behavior in supported Aurora MySQL, Aurora PostgreSQL (including Limitless Database), and RDS for PostgreSQL. In the event of threat detection, GuardDuty generates an RDS Protection finding. For more information about supported databases and enabling this protection plan in the newly supported Regions, see [RDS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/rds-protection.html).| June 4, 2025 +Updated functionality - Runtime Monitoring| GuardDuty Runtime Monitoring releases new security agent version 1.7.1 for Amazon EC2 resources. For more information about new agent versions and a list of additional resources to update your security agent, see [GuardDuty security agent release versions](https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring-agent-release-history.html).| June 3, 2025 @@ -18 +21 @@ Updated functionality - Runtime Monitoring| GuardDuty Runtime Monitoring release -Support for Asia Pacific (Thailand) Region| Amazon GuardDuty is now available in the Asia Pacific (Malaysia) Region. For information about which features are supported in this Region, see [Region-specific feature availability](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html#gd-regional-feature-availability). To enable GuardDuty in this Region, see [Getting started](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_settingup.html). You can receive notifications about updates to the GuardDuty features and threat detections by [Subscribing to Amazon SNS GuardDuty announcements](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_sns.html).| April 1, 2025 +Support for Asia Pacific (Thailand) Region| Amazon GuardDuty is now available in the Asia Pacific (Thailand) Region. For information about which features are supported in this Region, see [Region-specific feature availability](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html#gd-regional-feature-availability). To enable GuardDuty in this Region, see [Getting started](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_settingup.html). You can receive notifications about updates to the GuardDuty features and threat detections by [Subscribing to Amazon SNS GuardDuty announcements](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_sns.html).| April 1, 2025