AWS govcloud-us documentation change
Summary
Updated unsupported features list including malware scanning limitations and service availability changes
Security assessment
Documents security feature limitations (malware scanning exclusions, unsupported protections) which inform users about security capability gaps in GovCloud.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-guardduty.md b/govcloud-us/latest/UserGuide/govcloud-guardduty.md index 5539ffd71..68bf291e8 100644 --- a//govcloud-us/latest/UserGuide/govcloud-guardduty.md +++ b//govcloud-us/latest/UserGuide/govcloud-guardduty.md @@ -15 +15 @@ The following features are not supported in both the AWS GovCloud (US) Regions: - * [Runtime Monitoring](https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html) (including EKS Runtime Monitoring) + * In [Malware Protection for EC2](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html), the support for scanning instances with `productCode` as `marketplace` is not supported. GuardDuty will skip the malware scan for such instances and log the skip reason as `UNSUPPORTED_PRODUCT_CODE_TYPE`. @@ -17 +17 @@ The following features are not supported in both the AWS GovCloud (US) Regions: - * [RDS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/rds-protection.html) + * [Runtime Monitoring](https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html) (including EKS Runtime Monitoring) is not supported. @@ -19,5 +19 @@ The following features are not supported in both the AWS GovCloud (US) Regions: - * Cross-region data transfer - - * Member accounts invitation notifications through AWS Health Dashboard and email - - * In AWS GovCloud (US) Regions, AWS doesn't use or store Customer Content processed by Amazon GuardDuty to develop and improve the service or technologies of AWS or its affiliates. Opt-out policies are currently not applicable to these Regions. + * [RDS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/rds-protection.html) is not supported. @@ -24,0 +21 @@ The following features are not supported in both the AWS GovCloud (US) Regions: + * Cross-region data transfer is not supported. @@ -25,0 +23 @@ The following features are not supported in both the AWS GovCloud (US) Regions: + * Member accounts invitation notifications through AWS Health Dashboard and email is not supported. @@ -26,0 +25 @@ The following features are not supported in both the AWS GovCloud (US) Regions: + * In AWS GovCloud (US) Regions, AWS doesn't use or store Customer Content processed by Amazon GuardDuty to develop and improve the service or technologies of AWS or its affiliates. Opt-out policies are currently not applicable to these Regions. @@ -28 +27 @@ The following features are not supported in both the AWS GovCloud (US) Regions: -The following EKS audit log finding types ([EKS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html)) are not available in the AWS GovCloud (US) Regions: + * The following EKS audit log finding types ([EKS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html)) are not available in the AWS GovCloud (US) Regions: