AWS guardduty medium security documentation change
Summary
Modified 'Disable GuardDuty' permissions to restrict disabling to 'Self'
Security assessment
Changing the permission from 'Any*' to 'Self' prevents administrators from disabling GuardDuty in member accounts, improving security controls.
Diff
diff --git a/guardduty/latest/ug/administrator_member_relationships.md b/guardduty/latest/ug/administrator_member_relationships.md index c8567e535..b92584c21 100644 --- a//guardduty/latest/ug/administrator_member_relationships.md +++ b//guardduty/latest/ug/administrator_member_relationships.md @@ -63 +63 @@ Suspend GuardDuty | Any* | – | Any* | – -Disable GuardDuty | Any* | – | Any* | – +Disable GuardDuty | Any* | – | Any* | Self