AWS govcloud-us high security documentation change
Summary
Added documentation for Runtime Monitoring support in AWS GovCloud (US) Regions including VPC endpoint configuration, security agent installation details, and ECR repository information
Security assessment
The change documents security monitoring capabilities (Runtime Monitoring) that help detect threats in EC2/EKS environments. Providing correct VPC endpoint and agent installation details ensures proper security configuration.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-guardduty.md b/govcloud-us/latest/UserGuide/govcloud-guardduty.md index 790b6e492..949ea5392 100644 --- a//govcloud-us/latest/UserGuide/govcloud-guardduty.md +++ b//govcloud-us/latest/UserGuide/govcloud-guardduty.md @@ -14,0 +15,26 @@ The following list indicates the differences in the feature availability in AWS + * When using [Runtime Monitoring](https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html) (including EKS Runtime Monitoring), make the following changes in the AWS GovCloud (US) Regions: + + 1. **For both Amazon EC2 and Amazon EKS** – In the prerequisite step for creating an Amazon VPC endpoint manually, the **Service name** in the AWS GovCloud (US) Region should be `com.amazonaws.`us-gov-east-1`.guardduty-data-fips`. + +Replace `us-gov-east-1` with your Region. This must be the same Region as your Amazon EC2 instance (or Amazon EKS cluster) that belongs to your AWS account ID. + + 2. **For Amazon EC2** – When managing the security agent manually using [Method 2 - Using Linux Package Managers](https://docs.aws.amazon.com/guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.html), use the following AWS account IDs and Regions for both RPM installation and Debian installation: + + * AWS GovCloud (US-East) (`us-gov-east-1`) – 383115532789 + + * AWS GovCloud (US-West) (`us-gov-west-1`) – 383110348953 + + 3. **For Amazon EKS and Fargate-Amazon ECS resources** – For [Amazon ECR repository hosting GuardDuty agent](https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring-ecr-repository-gdu-agent.html), use the following ECR repository for your Amazon EKS and Fargate-Amazon ECS resources: + + * **Amazon ECR repository for EKS resources:** + +AWS GovCloud (US-East) - `151742754352.dkr.ecr.us-gov-east-1.amazonaws.com` + +AWS GovCloud (US-West) - `013241004608.dkr.ecr.us-gov-west-1.amazonaws.com` + + * **Amazon ECR repository for Fargate-ECS resources:** + +AWS GovCloud (US-East) - `383115532789.dkr.ecr.us-gov-east-1.amazonaws.com/aws-guardduty-agent-fargate` + +AWS GovCloud (US-West) - `383110348953.dkr.ecr.us-gov-west-1.amazonaws.com/aws-guardduty-agent-fargate` + @@ -19,2 +44,0 @@ The following list indicates the differences in the feature availability in AWS -[Runtime Monitoring](https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html) (including EKS Runtime Monitoring) is not supported in AWS GovCloud (US) Regions. -