AWS AWSCloudFormation documentation change
Summary
Clarified the purpose and management scope of GuardDuty TrustedEntitySet, emphasizing creation process and administrator account requirements.
Security assessment
The change provides clearer documentation about configuring trusted entities to suppress GuardDuty findings, which is a security feature. However, there is no evidence of addressing a specific security vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-trustedentityset.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-trustedentityset.md index f52a07337..1c29c0805 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-trustedentityset.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-guardduty-trustedentityset.md @@ -9 +9 @@ This is the new _AWS CloudFormation Template Reference Guide_. Please update you -The `AWS::GuardDuty::TrustedEntitySet` resource helps you create a list of IP addresses and domain names that you can use for secure communication with your AWS infrastructure and applications. Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses and domain names. At any given time, you can have only one trusted entity set. +Creates a new trusted entity set. In the trusted entity set, you can provide IP addresses and domains that you believe are secure for communication in your AWS environment. GuardDuty will not generate findings for the entries that are specified in a trusted entity set. At any given time, you can have only one trusted entity set. @@ -11 +11 @@ The `AWS::GuardDuty::TrustedEntitySet` resource helps you create a list of IP ad -Only the users of the GuardDuty administrator account can manage the entity sets. These settings automatically apply member accounts. +Only users of the administrator account can manage the entity sets, which automatically apply to member accounts.