AWS guardduty documentation change
Summary
Updated all references from agent version 1.7.1 to 1.8.0 in installation instructions
Security assessment
This updates documentation for a security agent version bump but lacks explicit evidence of patching a security vulnerability. The change adds documentation for a security feature (agent installation).
Diff
diff --git a/guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md b/guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md index db11f8b86..06ddb5c96 100644 --- a//guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md +++ b//guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md @@ -97 +97 @@ Prepare the commands with appropriate public key, signature of x86_64 RPM, signa - s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.1/publickey.pem + s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.8.0/publickey.pem @@ -104 +104 @@ Signature of x86_64 RPM - s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.1/x86_64/amazon-guardduty-agent-1.7.1.x86_64.sig + s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.8.0/x86_64/amazon-guardduty-agent-1.8.0.x86_64.sig @@ -109 +109 @@ Signature of arm64 RPM - s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.1/arm64/amazon-guardduty-agent-1.7.1.arm64.sig + s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.8.0/arm64/amazon-guardduty-agent-1.8.0.arm64.sig @@ -116 +116 @@ Access link for x86_64 RPM - s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.1/x86_64/amazon-guardduty-agent-1.7.1.x86_64.rpm + s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.8.0/x86_64/amazon-guardduty-agent-1.8.0.x86_64.rpm @@ -121 +121 @@ Access link for arm64 RPM - s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.1/arm64/amazon-guardduty-agent-1.7.1.arm64.rpm + s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.8.0/arm64/amazon-guardduty-agent-1.8.0.arm64.rpm @@ -162,3 +162,3 @@ In the following command to download appropriate public key, signature of x86_64 - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.1/x86_64/amazon-guardduty-agent-1.7.1.x86_64.rpm ./amazon-guardduty-agent-1.7.1.x86_64.rpm - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.1/x86_64/amazon-guardduty-agent-1.7.1.x86_64.sig ./amazon-guardduty-agent-1.7.1.x86_64.sig - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.7.1/publickey.pem ./publickey.pem + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.8.0/x86_64/amazon-guardduty-agent-1.8.0.x86_64.rpm ./amazon-guardduty-agent-1.8.0.x86_64.rpm + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.8.0/x86_64/amazon-guardduty-agent-1.8.0.x86_64.sig ./amazon-guardduty-agent-1.8.0.x86_64.sig + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.8.0/publickey.pem ./publickey.pem @@ -183 +183 @@ Use the following command to verify the signature - gpg --verify amazon-guardduty-agent-1.7.1.x86_64.sig amazon-guardduty-agent-1.7.1.x86_64.rpm + gpg --verify amazon-guardduty-agent-1.8.0.x86_64.sig amazon-guardduty-agent-1.8.0.x86_64.rpm @@ -212 +212 @@ Now, try the verification process again. - sudo rpm -ivh amazon-guardduty-agent-1.7.1.x86_64.rpm + sudo rpm -ivh amazon-guardduty-agent-1.8.0.x86_64.rpm @@ -234 +234 @@ In the following templates, replace the value of the AWS Region, AWS account ID, - s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.1/publickey.pem + s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.8.0/publickey.pem @@ -241 +241 @@ Signature of amd64 - s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.1/amd64/amazon-guardduty-agent-1.7.1.amd64.sig + s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.8.0/amd64/amazon-guardduty-agent-1.8.0.amd64.sig @@ -246 +246 @@ Signature of arm64 - s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.1/arm64/amazon-guardduty-agent-1.7.1.arm64.sig + s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.8.0/arm64/amazon-guardduty-agent-1.8.0.arm64.sig @@ -253 +253 @@ Access link for amd64 - s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.1/amd64/amazon-guardduty-agent-1.7.1.amd64.deb + s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.8.0/amd64/amazon-guardduty-agent-1.8.0.amd64.deb @@ -258 +258 @@ Access link for arm64 - s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.1/arm64/amazon-guardduty-agent-1.7.1.arm64.deb + s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.8.0/arm64/amazon-guardduty-agent-1.8.0.arm64.deb @@ -298,3 +298,3 @@ In the following commands, replace the account ID with the appropriate AWS accou - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.1/amd64/amazon-guardduty-agent-1.7.1.amd64.deb ./amazon-guardduty-agent-1.7.1.amd64.deb - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.1/amd64/amazon-guardduty-agent-1.7.1.amd64.sig ./amazon-guardduty-agent-1.7.1.amd64.sig - aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.7.1/publickey.pem ./publickey.pem + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.8.0/amd64/amazon-guardduty-agent-1.8.0.amd64.deb ./amazon-guardduty-agent-1.8.0.amd64.deb + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.8.0/amd64/amazon-guardduty-agent-1.8.0.amd64.sig ./amazon-guardduty-agent-1.8.0.amd64.sig + aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.8.0/publickey.pem ./publickey.pem @@ -315 +315 @@ gpg shows import successfully - gpg --verify amazon-guardduty-agent-1.7.1.amd64.sig amazon-guardduty-agent-1.7.1.amd64.deb + gpg --verify amazon-guardduty-agent-1.8.0.amd64.sig amazon-guardduty-agent-1.8.0.amd64.deb @@ -346 +346 @@ Now, retry the verification process. - sudo dpkg -i amazon-guardduty-agent-1.7.1.amd64.deb + sudo dpkg -i amazon-guardduty-agent-1.8.0.amd64.deb