AWS securityhub high security documentation change
Summary
Added documentation about malicious software packages in Lambda functions and updated vulnerability spelling
Security assessment
The change introduces new documentation about detecting and remediating malicious packages in Lambda functions, which directly addresses security threats. The added section explains how malicious packages compromise confidentiality/integrity and provides remediation steps, indicating a security-focused update.
Diff
diff --git a/securityhub/latest/userguide/exposure-lambda-function.md b/securityhub/latest/userguide/exposure-lambda-function.md index a74c5f176..82914f58c 100644 --- a//securityhub/latest/userguide/exposure-lambda-function.md +++ b//securityhub/latest/userguide/exposure-lambda-function.md @@ -5 +5 @@ -Misconfiguration traits for Lambda functionsReachability traits for Lambda functionsVulnerability traits for Lambda functions +Misconfiguration traits for Lambda functionsReachability traits for Lambda functionsVulnerability traits for Lambda functionsThe Lambda function has malicious software packages @@ -25,4 +24,0 @@ The remediation guidance provided in this topic might require additional consult -###### Note - -The remediation guidance provided in this topic might require additional consultation in other AWS resources. - @@ -51 +47,3 @@ The remediation guidance provided in this topic might require additional consult - * [The Lambda function has software vulnerabilites](./exposure-lambda-function.html#low-priority-vulnerability) + * [The Lambda function has software vulnerabilities](./exposure-lambda-function.html#low-priority-vulnerability) + + * [The Lambda function has malicious software packages](./exposure-lambda-function.html#malicious-package) @@ -165 +163 @@ Review the **References** section in the **Vulnerability** tab for the trait. Ve -### The Lambda function has software vulnerabilites +### The Lambda function has software vulnerabilities @@ -172,0 +171,8 @@ Review the **References** section in the **Vulnerability** tab for the trait. Ve +## The Lambda function has malicious software packages + +Malicious packages are software components that contain harmful code designed to compromise the confidentiality, integrity, and availability of your systems and data. Malicious packages pose an active and critical threat to your Lambda function, as attackers can execute malicious code automatically without exploiting a vulnerability. Following security best practices, AWS recommends removing malicious packages to protect your Lambda function from potential attacks. + +###### Remove malicious packages + +Review the malicious package details in the **References** section of the **Vulnerability** tab of the trait to understand the threat. Remove the identified malicious packages from your function code and dependencies. For functions using layers, check if the malicious packages are installed in any layers and remove them. Update your deployment package or container image to exclude the malicious packages, then deploy the updated version. For instructions, see [Deploying Lambda functions as .zip file archives](https://docs.aws.amazon.com/lambda/latest/dg/configuration-function-zip.html) for .zip file archives or [Create a Lambda function using a container image](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html) for container images. +