AWS guardduty medium security documentation change
Summary
Updated documentation history to deprecate AmazonGuardDutyFullAccess policy and revise policy update notes
Security assessment
Explicitly deprecates a policy (AmazonGuardDutyFullAccess) due to security improvements in its replacement (v2 policy). Also updates references to policy changes for Malware Protection, which is a security feature.
Diff
diff --git a/guardduty/latest/ug/doc-history.md b/guardduty/latest/ug/doc-history.md index cf4d254d5..5ae1296e1 100644 --- a//guardduty/latest/ug/doc-history.md +++ b//guardduty/latest/ug/doc-history.md @@ -12,0 +13 @@ Change| Description| Date +AmazonGuardDutyFullAccess - Deprecated| This policy has been replaced by [AmazonGuardDutyFullAccess_v2](https://docs.aws.amazon.com/guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonGuardDutyFullAccess-v2). After August 26, 2025, this policy can not be attached to any new users, groups, or roles.| August 26, 2025 @@ -112 +113 @@ New feature - Malware Protection for S3| GuardDuty announces general availabilit -Updated AmazonGuardDutyFullAccess policy| Added permission that allows you to pass an IAM role to GuardDuty when you enable Malware Protection for S3. For more information about this policy update, see [GuardDuty updates to AWS managed policies](https://docs.aws.amazon.com/guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonGuardDutyFullAccess).| June 10, 2024 +Updated AmazonGuardDutyFullAccess policy| Added permission that allows you to pass an IAM role to GuardDuty when you enable Malware Protection for S3. For more information about this policy update, see AmazonGuardDutyFullAccess.| June 10, 2024 @@ -245 +246 @@ GuardDuty Runtime Monitoring support expanded to 19 AWS Regions| Runtime Monitor -[Updated the AWS managed policies](https://docs.aws.amazon.com/guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)| GuardDuty added a new permission, `organizations:ListAccounts` to the [AmazonGuardDutyFullAccessPolicy](https://docs.aws.amazon.com/guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonGuardDutyFullAccess) and [AmazonGuardDutyReadOnlyAccess](https://docs.aws.amazon.com/guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonGuardDutyReadOnlyAccess).| November 16, 2023 +[Updated the AWS managed policies](https://docs.aws.amazon.com/guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-updates)| GuardDuty added a new permission, `organizations:ListAccounts` to the AmazonGuardDutyFullAccessPolicy and [AmazonGuardDutyReadOnlyAccess](https://docs.aws.amazon.com/guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonGuardDutyReadOnlyAccess).| November 16, 2023