AWS guardduty documentation change
Summary
Added new malware protection finding types for backup resources (EBS snapshots, AMIs, AWS Backup recovery points) and a new IAM finding type related to Bedrock logging.
Security assessment
Introduces documentation for new security detection capabilities targeting backup resources and Bedrock logging configurations, indicating expanded threat detection coverage rather than addressing existing vulnerabilities.
Diff
diff --git a/guardduty/latest/ug/guardduty_finding-types-active.md b/guardduty/latest/ug/guardduty_finding-types-active.md index afeacac5b..92f394938 100644 --- a//guardduty/latest/ug/guardduty_finding-types-active.md +++ b//guardduty/latest/ug/guardduty_finding-types-active.md @@ -34,0 +35,2 @@ The following pages are categorized by the potentially impacted resource type as + * [Malware Protection for Backup finding types](./findings-malware-protection-backup.html) + @@ -69,0 +72 @@ Finding type | Resource type | Foundational data source/Feature | Finding severi +[DefenseEvasion:IAMUser/BedrockLoggingDisabled](./guardduty_finding-types-iam.html#defenseevasion-iam-bedrockloggingdisabled) | IAM | CloudTrail management events | Medium @@ -131,0 +135,4 @@ Finding type | Resource type | Foundational data source/Feature | Finding severi +[Execution:EC2/MaliciousFile!Snapshot](./findings-malware-protection-backup.html#execution-malware-ec2-maliciousfile-snapshot) | Amazon EBS | Malware Protection for Backup | Varies depending on the detected threat +[Execution:EC2/MaliciousFile!AMI](./findings-malware-protection-backup.html#execution-malware-ec2-maliciousfile-ami) | Amazon EC2 | Malware Protection for Backup | Varies depending on the detected threat +[Execution:EC2/MaliciousFile!RecoveryPoint](./findings-malware-protection-backup.html#execution-malware-ec2-maliciousfile-recoverypoint) | AWS Backup | Malware Protection for Backup | Varies depending on the detected threat +[Execution:S3/MaliciousFile!RecoveryPoint](./findings-malware-protection-backup.html#execution-malware-s3-maliciousfile-recoverypoint) | AWS Backup | Malware Protection for Backup | Varies depending on the detected threat