AWS security-ir documentation change
Summary
Updated references to 'GuardDuty' with 'Amazon GuardDuty', revised suppression rule review steps, and added detailed console navigation instructions.
Security assessment
The changes enhance documentation clarity around managing GuardDuty suppression rules, which are part of security feature configurations. While improving security process documentation, there's no indication of addressing a specific security vulnerability.
Diff
diff --git a/security-ir/latest/userguide/guard-duty.md b/security-ir/latest/userguide/guard-duty.md index 7d94988cd..3d8ffc831 100644 --- a//security-ir/latest/userguide/guard-duty.md +++ b//security-ir/latest/userguide/guard-duty.md @@ -7 +7 @@ -AWS Security Incident Response proactively ingests, triages, and responds to all GuardDuty findings and Security Hub CSPM findings from CrowdStrike, FortinetCNAPP (Lacework), and Trend Micro. Our auto-triage technology eliminates internal analysis requirements. The service creates suppression and auto-archive rules in GuardDuty and Security Hub CSPM for benign findings. View or modify these rules under "Findings" in the GuardDuty console. +AWS Security Incident Response proactively ingests, triages, and responds to all Amazon GuardDuty findings and AWS Security Hub CSPM findings from CrowdStrike, FortinetCNAPP (Lacework), and Trend Micro. Our auto-triage technology eliminates internal analysis requirements. The service creates suppression and auto-archive rules in GuardDuty and Security Hub CSPM for benign findings. View or modify these rules under "Findings" in the Amazon GuardDuty console. @@ -9 +9 @@ AWS Security Incident Response proactively ingests, triages, and responds to all -**To quickly review enabled GuardDuty Suppression Rules:** +To review enabled GuardDuty Suppression Rules, complete the following steps: @@ -11 +11 @@ AWS Security Incident Response proactively ingests, triages, and responds to all - 1. Access the GuardDuty console. + 1. Open the Amazon GuardDuty console. @@ -13 +13 @@ AWS Security Incident Response proactively ingests, triages, and responds to all - 2. Choose Findings. + 2. Choose **Findings**. @@ -15 +15 @@ AWS Security Incident Response proactively ingests, triages, and responds to all - + 3. In the navigation pane, choose **Suppression rules**. The **Suppression rules** page displays a list of all the suppression rules for your account. @@ -17 +17 @@ AWS Security Incident Response proactively ingests, triages, and responds to all - 3. Select the down arrow and notice the naming convention of the suppression rule. + 4. To review or change the settings for a rule, choose the rule, and then choose **Update suppression rule** from the **Actions** menu.