AWS AWSCloudFormation documentation change
Summary
Enhanced IPSet documentation with operational details about trusted IP management, activation requirements, and format specifications
Security assessment
Improves clarity around configuring trusted IP allow lists in GuardDuty, which is a security feature. However, there is no indication this addresses a specific vulnerability - rather, it enhances documentation for proper security configuration.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-ipset.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-ipset.md index e6c0abca4..73e812c0f 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-ipset.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-ipset.md @@ -9 +9,3 @@ This is the new _AWS CloudFormation Template Reference Guide_. Please update you -The `AWS::GuardDuty::IPSet` resource specifies a new `IPSet`. An `IPSet` is a list of trusted IP addresses from which secure communication is allowed with AWS infrastructure and applications. +The `AWS::GuardDuty::IPSet` resource helps you create a list of trusted IP addresses that you can use for secure communication with AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses. + +Only the users of the GuardDuty administrator account can manage this list. These settings are also applied to the member accounts. @@ -52 +54 @@ To declare this entity in your AWS CloudFormation template, use the following sy -Indicates whether or not GuardDuty uses the `IPSet`. +A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to prevent generating findings based on an activity associated with these entries, this list must be active. @@ -97 +99 @@ _Required_ : No -The format of the file that contains the IPSet. +The format of the file that contains the IPSet. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the _Amazon GuardDuty User Guide_. @@ -127 +129 @@ The user-friendly name to identify the IPSet. -Allowed characters are alphanumeric, whitespace, dash (-), and underscores (_). +The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_). @@ -142 +144 @@ _Required_ : No -The tags to be added to a new IP set resource. Each tag consists of a key and an optional value, both of which you define. +The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.