AWS guardduty documentation change
Summary
Added documentation about AmazonGuardDutyServiceRolePolicy update adding cloudtrail:CreateServiceLinkedChannel permission
Security assessment
This change documents a policy update that enables GuardDuty to create service-linked channels for CloudTrail. While this enhances GuardDuty's monitoring capabilities, there is no evidence it addresses a specific security vulnerability. The change adds documentation about security feature enhancements.
Diff
diff --git a/guardduty/latest/ug/doc-history.md b/guardduty/latest/ug/doc-history.md index 599d12634..f0b0ddb34 100644 --- a//guardduty/latest/ug/doc-history.md +++ b//guardduty/latest/ug/doc-history.md @@ -12,0 +13 @@ Change| Description| Date +Updated AmazonGuardDutyServiceRolePolicy| Added the `cloudtrail:CreateServiceLinkedChannel` permission to enable an additional mechanism for consuming AWS CloudTrail events. For more information, see [GuardDuty updates to AWS managed policies](https://docs.aws.amazon.com/guardduty/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| March 25, 2026