AWS guardduty documentation change
Summary
Updated policy reference from AmazonGuardDutyFullAccess to AmazonGuardDutyFullAccess_v2 in SNS notification example
Security assessment
Change documents updated IAM policy requirements for Malware Protection feature, which is a security-related capability. However, there is no evidence this addresses a specific security vulnerability.
Diff
diff --git a/guardduty/latest/ug/guardduty_sns.md b/guardduty/latest/ug/guardduty_sns.md index 9b0c77fb8..8701f02d9 100644 --- a//guardduty/latest/ug/guardduty_sns.md +++ b//guardduty/latest/ug/guardduty_sns.md @@ -105 +105 @@ An example GuardDuty general notification message: - "Message" : "{\"version\":\"1\",\"type\":\"GENERAL\",\"message\":[{\"title\":\"Updated AmazonGuardDutyFullAccess policy\",\"body\":\"Added permission that allows you to pass an IAM role to GuardDuty when you enable Malware Protection for S3.\",\"links\":[\"https://docs.aws.amazon.com//guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonGuardDutyFullAccess\"]}]}", + "Message" : "{\"version\":\"1\",\"type\":\"GENERAL\",\"message\":[{\"title\":\"Updated AmazonGuardDutyFullAccess_v2 policy\",\"body\":\"Added permission that allows you to pass an IAM role to GuardDuty when you enable Malware Protection for S3.\",\"links\":[\"https://docs.aws.amazon.com//guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonGuardDutyFullAccess-v2\"]}]}", @@ -124 +124 @@ The parsed Message value (with escaped quotes removed) is shown below: - "https://docs.aws.amazon.com//guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonGuardDutyFullAccess" + "https://docs.aws.amazon.com//guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonGuardDutyFullAccess-v2"