AWS Security ChangesHomeSearch

AWS guardduty documentation change

Service: guardduty · 2025-08-16 · Documentation low

File: guardduty/latest/ug/guardduty_limits.md

Summary

Updated service limits documentation to include threat/trusted entity lists and clarify IP address list terminology

Security assessment

Adds documentation about security-related service limits for threat entity lists (1,000 entities per list) and trusted entity lists. While related to security features, the change itself is administrative documentation update rather than addressing a specific security issue.

Diff

diff --git a/guardduty/latest/ug/guardduty_limits.md b/guardduty/latest/ug/guardduty_limits.md
index febead914..07615856b 100644
--- a//guardduty/latest/ug/guardduty_limits.md
+++ b//guardduty/latest/ug/guardduty_limits.md
@@ -29,3 +29,5 @@ Finding retention period | 90 days | The maximum number of days a finding is ret
-IP addresses and CIDR ranges per Trusted IP List | 2,000 | The maximum number of IP addresses and CIDR ranges that you can include in a single Trusted IP List. You can't request a quota increase.  
-IP addresses and CIDR ranges per Threat List | 250,000 | The maximum number of IP address and CIDR ranges that you can include in a Threat List. You can't request a quota increase.  
-Maximum file size | 35 MB | The maximum file size for the file used to upload a list of IP addresses or CIDR ranges to include in a Trusted IP List or a Threat List. You can't request a quota increase.  
+IP addresses and CIDR ranges per trusted IP address list | 2,000 | The maximum number of IP addresses and CIDR ranges that you can include in a single trusted IP address list. You can't request a quota increase.  
+IP addresses and CIDR ranges per threat IP address list | 250,000 | The maximum number of IP address and CIDR ranges that you can include in a threat IP address list. You can't request a quota increase.  
+Entities per threat entity list | 1,000 | The maximum number of entities that you can include in a single threat entity list. You can't request a quota increase.  
+Entities per trusted entity list | 1,000 | The maximum number of entities that you can include in a trusted entity list. You can't request a quota increase.  
+Maximum file size | 35 MB | The maximum file size for the file used to upload an entity list or an IP address list. You can't request a quota increase.  
@@ -34,2 +36,4 @@ Member accounts | 50,000 | The maximum number of member accounts associated with
-Threat intel sets | 6 | The maximum number of Threat intel sets that you can add per AWS account per Region. You can't request a quota increase.  
-Trusted IP sets | 1 | The maximum number of trusted IP sets that can be uploaded and activated per AWS account per Region. You can't request a quota increase.  
+Threat intel sets (IP address list) | 6 | The maximum number of threat IP address list that you can add per AWS account per Region. You can't request a quota increase.  
+Trusted IP sets (IP address list) | 1 | The maximum number of trusted IP address list that can be uploaded and activated per AWS account per Region. You can't request a quota increase.  
+Threat entity lists | 6 | The maximum number of threat entity lists that you can add per AWS account per Region. You can't request a quota increase.  
+Trusted entity list | 1 | The maximum number of trusted entity list that can be uploaded and activated per AWS account per Region. You can't request a quota increase.