AWS guardduty high security documentation change
Summary
Added documentation for new finding type DefenseEvasion:IAMUser/BedrockLoggingDisabled, Malware Protection for Backup feature, and IAM role permission changes. Fixed URL formatting in IAM best practices section.
Security assessment
The new finding type detects logging disablement attempts in AI workloads (security threat detection). Malware Protection for Backup is a security feature. IAM role changes enable this security feature. URL fix is non-security.
Diff
diff --git a/guardduty/latest/ug/doc-history.md b/guardduty/latest/ug/doc-history.md index f74f6d128..bfb959fd9 100644 --- a//guardduty/latest/ug/doc-history.md +++ b//guardduty/latest/ug/doc-history.md @@ -12,0 +13,3 @@ Change| Description| Date +New finding type - DefenseEvasion:IAMUser/BedrockLoggingDisabled| GuardDuty introduces a new finding type that detects when Amazon Bedrock model invocation logging is disabled, which may indicate attempts to evade detection of AI workload activity. For more information, see [DefenseEvasion:IAMUser/BedrockLoggingDisabled](https://docs.aws.amazon.com/guardduty/latest/ug/findings_iam.html#defenseevasion-iam-bedrockloggingdisabled).| November 21, 2025 +New feature - Malware Protection for Backup| GuardDuty Malware Protection for Backup is now available in all commercial Regions where GuardDuty is available. This feature helps you detect the potential presence of malware in your backup resources through full and incremental scans of Amazon EBS snapshots, EC2 AMIs, and Recovery Points. For more information on this feature see [Malware Protection for Backup](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection-backup.html)| November 19, 2025 +Change to AmazonGuardDutyFullAccess and AmazonGuardDutyFullAccess_V2| Added permission that allows you to pass an IAM role to GuardDuty when you enable Malware Protection for Backup.| November 19, 2025 @@ -388 +391 @@ For more information about protection plan availability in the Israel (Tel Aviv) -[Amazon GuardDuty User Guide is aligned with IAM best practices](https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html)| Updated guide to align with the IAM best practices. For more information, see [Security best practices in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html).| February 10, 2023 +[Amazon GuardDuty User Guide is aligned with IAM best practices](https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html)| Updated guide to align with the IAM best practices. For more information, see [Security best practices in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html).| February 10, 2023