AWS guardduty documentation change

Service: guardduty · 2025-06-16 · Documentation low

File: guardduty/latest/ug/runtime-monitoring-ecr-repository-gdu-agent.md

Summary

Updated prerequisite section title and added details about GuardDuty agent image storage in ECR/S3

Security assessment

The changes clarify prerequisites and storage details but do not address a specific security vulnerability or introduce new security features.

Diff

diff --git a/guardduty/latest/ug/runtime-monitoring-ecr-repository-gdu-agent.md b/guardduty/latest/ug/runtime-monitoring-ecr-repository-gdu-agent.md
index 0ca76a9cf..eb640c792 100644
--- a//guardduty/latest/ug/runtime-monitoring-ecr-repository-gdu-agent.md
+++ b//guardduty/latest/ug/runtime-monitoring-ecr-repository-gdu-agent.md
@@ -9 +9 @@ The following sections list the Amazon Elastic Container Registry (Amazon ECR) r
-The prerequisite to [Provide ECR permissions and subnet details](./prereq-runtime-monitoring-ecs-support.html#before-enable-runtime-monitoring-ecs) requires you to provide a task execution role that has certain Amazon Elastic Container Registry (Amazon ECR) permissions. To further restrict these permissions, you can add the Amazon ECR repository URI that hosts the GuardDuty agent for Fargate-Amazon ECS resources.
+The prerequisite to [Prerequisites for container image access](./prereq-runtime-monitoring-ecs-support.html#before-enable-runtime-monitoring-ecs) requires you to provide a task execution role that has certain Amazon Elastic Container Registry (Amazon ECR) permissions. To further restrict these permissions, you can add the Amazon ECR repository URI that hosts the GuardDuty agent for Fargate-Amazon ECS resources.
@@ -118,0 +119,2 @@ Israel (Tel Aviv) | `292660727137.dkr.ecr.il-central-1.amazonaws.com`
+As a prerequisite to using Runtime Monitoring for Amazon ECS-Fargate, you must [Prerequisites for container image access](./prereq-runtime-monitoring-ecs-support.html#before-enable-runtime-monitoring-ecs). The GuardDuty agent sidecar container image is stored in Amazon ECR, with its image layers stored in Amazon S3. For more information, see [How Runtime Monitoring works with Fargate (Amazon ECS only)](./how-runtime-monitoring-works-ecs-fargate.html).
+