AWS govcloud-us documentation change
Summary
Updated GuardDuty documentation for GovCloud regions with revised feature availability details and organizational changes
Security assessment
The changes clarify security feature limitations (e.g., unsupported Runtime Monitoring) and document supported security capabilities (Extended Threat Detection for EKS). While it updates security-related documentation, there's no evidence of addressing a specific security vulnerability. The changes improve transparency about security service capabilities in GovCloud.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-guardduty.md b/govcloud-us/latest/UserGuide/govcloud-guardduty.md index 68bf291e8..3acb8be63 100644 --- a//govcloud-us/latest/UserGuide/govcloud-guardduty.md +++ b//govcloud-us/latest/UserGuide/govcloud-guardduty.md @@ -5 +5 @@ -How Amazon GuardDuty differs for AWS GovCloud (US)Documentation for Amazon GuardDutyExport-controlled content +How Amazon GuardDuty differs for AWS GovCloud (US) RegionsDocumentation for Amazon GuardDutyExport-controlled content @@ -11 +11 @@ Amazon GuardDuty is a continuous security monitoring service. Amazon GuardDuty c -## How Amazon GuardDuty differs for AWS GovCloud (US) +## How Amazon GuardDuty differs for AWS GovCloud (US) Regions @@ -13 +13 @@ Amazon GuardDuty is a continuous security monitoring service. Amazon GuardDuty c -The following features are not supported in both the AWS GovCloud (US) Regions: +The following list indicates the differences in the feature availability in AWS GovCloud (US) Regions: @@ -15,3 +15 @@ The following features are not supported in both the AWS GovCloud (US) Regions: - * In [Malware Protection for EC2](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html), the support for scanning instances with `productCode` as `marketplace` is not supported. GuardDuty will skip the malware scan for such instances and log the skip reason as `UNSUPPORTED_PRODUCT_CODE_TYPE`. - - * [Runtime Monitoring](https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html) (including EKS Runtime Monitoring) is not supported. + * The [Extended Threat Detection](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html) coverage for EKS clusters supports detecting multi-stage attacks through available EKS Protection finding types (EKS audit log monitoring) and AWS API activity in AWS GovCloud (US) Regions. @@ -19 +17 @@ The following features are not supported in both the AWS GovCloud (US) Regions: - * [RDS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/rds-protection.html) is not supported. +[Runtime Monitoring](https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html) (including EKS Runtime Monitoring) is not supported in AWS GovCloud (US) Regions. @@ -21,7 +19 @@ The following features are not supported in both the AWS GovCloud (US) Regions: - * Cross-region data transfer is not supported. - - * Member accounts invitation notifications through AWS Health Dashboard and email is not supported. - - * In AWS GovCloud (US) Regions, AWS doesn't use or store Customer Content processed by Amazon GuardDuty to develop and improve the service or technologies of AWS or its affiliates. Opt-out policies are currently not applicable to these Regions. - - * The following EKS audit log finding types ([EKS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html)) are not available in the AWS GovCloud (US) Regions: + * The following [EKS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html) (EKS audit log monitoring) finding types are not available in the AWS GovCloud (US) Regions: @@ -44,0 +37,10 @@ The following features are not supported in both the AWS GovCloud (US) Regions: + * [RDS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/rds-protection.html) is not supported in AWS GovCloud (US) Regions. + + * In [Malware Protection for EC2](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html), the support for scanning instances with `productCode` as `marketplace` is not supported. GuardDuty will skip the malware scan for such instances and log the skip reason as `UNSUPPORTED_PRODUCT_CODE_TYPE`. + + * Cross-region data transfer is not supported in AWS GovCloud (US) Regions. + + * Member accounts invitation notifications through AWS Health Dashboard and email are not supported in AWS GovCloud (US) Regions. + + * In AWS GovCloud (US) Regions, AWS doesn't use or store Customer Content processed by Amazon GuardDuty to develop and improve the service or technologies of AWS or its affiliates. Opt-out policies are currently not applicable to these Regions. +