AWS Security ChangesHomeSearch

AWS guardduty documentation change

Service: guardduty · 2026-04-04 · Documentation low

File: guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md

Summary

Updated GuardDuty security agent installation instructions from version 1.9.1 to 1.9.2, including updated S3 paths for RPM/DEB packages, signatures, and public keys

Security assessment

This is a routine version update for the GuardDuty security agent. The changes update references from version 1.9.1 to 1.9.2 in installation commands and S3 paths. While GuardDuty is a security service, this specific change shows no evidence of addressing a specific security vulnerability or incident - it appears to be a standard version bump for compatibility and feature updates.

Diff

diff --git a/guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md b/guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md
index 6738060a7..9fb9aeffe 100644
--- a//guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md
+++ b//guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md
@@ -97 +97 @@ Prepare the commands with appropriate public key, signature of x86_64 RPM, signa
-                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.1/publickey.pem
+                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.2/publickey.pem
@@ -104 +104 @@ Signature of x86_64 RPM
-                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.1/x86_64/amazon-guardduty-agent-1.9.1.x86_64.sig
+                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.2/x86_64/amazon-guardduty-agent-1.9.2.x86_64.sig
@@ -109 +109 @@ Signature of arm64 RPM
-                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.1/arm64/amazon-guardduty-agent-1.9.1.arm64.sig
+                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.2/arm64/amazon-guardduty-agent-1.9.2.arm64.sig
@@ -116 +116 @@ Access link for x86_64 RPM
-                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.1/x86_64/amazon-guardduty-agent-1.9.1.x86_64.rpm
+                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.2/x86_64/amazon-guardduty-agent-1.9.2.x86_64.rpm
@@ -121 +121 @@ Access link for arm64 RPM
-                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.1/arm64/amazon-guardduty-agent-1.9.1.arm64.rpm
+                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.2/arm64/amazon-guardduty-agent-1.9.2.arm64.rpm
@@ -162,3 +162,3 @@ In the following command to download appropriate public key, signature of x86_64
-                aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.1/x86_64/amazon-guardduty-agent-1.9.1.x86_64.rpm ./amazon-guardduty-agent-1.9.1.x86_64.rpm
-        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.1/x86_64/amazon-guardduty-agent-1.9.1.x86_64.sig ./amazon-guardduty-agent-1.9.1.x86_64.sig
-        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.1/publickey.pem ./publickey.pem
+                aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.2/x86_64/amazon-guardduty-agent-1.9.2.x86_64.rpm ./amazon-guardduty-agent-1.9.2.x86_64.rpm
+        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.2/x86_64/amazon-guardduty-agent-1.9.2.x86_64.sig ./amazon-guardduty-agent-1.9.2.x86_64.sig
+        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.9.2/publickey.pem ./publickey.pem
@@ -183 +183 @@ Use the following command to verify the signature
-                gpg --verify amazon-guardduty-agent-1.9.1.x86_64.sig amazon-guardduty-agent-1.9.1.x86_64.rpm
+                gpg --verify amazon-guardduty-agent-1.9.2.x86_64.sig amazon-guardduty-agent-1.9.2.x86_64.rpm
@@ -212 +212 @@ Now, try the verification process again.
-        sudo rpm -ivh amazon-guardduty-agent-1.9.1.x86_64.rpm
+        sudo rpm -ivh amazon-guardduty-agent-1.9.2.x86_64.rpm
@@ -234 +234 @@ In the following templates, replace the value of the AWS Region, AWS account ID,
-                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.1/publickey.pem
+                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.2/publickey.pem
@@ -241 +241 @@ Signature of amd64
-                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.1/amd64/amazon-guardduty-agent-1.9.1.amd64.sig
+                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.2/amd64/amazon-guardduty-agent-1.9.2.amd64.sig
@@ -246 +246 @@ Signature of arm64
-                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.1/arm64/amazon-guardduty-agent-1.9.1.arm64.sig
+                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.2/arm64/amazon-guardduty-agent-1.9.2.arm64.sig
@@ -253 +253 @@ Access link for amd64
-                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.1/amd64/amazon-guardduty-agent-1.9.1.amd64.deb
+                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.2/amd64/amazon-guardduty-agent-1.9.2.amd64.deb
@@ -258 +258 @@ Access link for arm64
-                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.1/arm64/amazon-guardduty-agent-1.9.1.arm64.deb
+                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.2/arm64/amazon-guardduty-agent-1.9.2.arm64.deb
@@ -298,3 +298,3 @@ In the following commands, replace the account ID with the appropriate AWS accou
-                aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.1/amd64/amazon-guardduty-agent-1.9.1.amd64.deb ./amazon-guardduty-agent-1.9.1.amd64.deb
-        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.1/amd64/amazon-guardduty-agent-1.9.1.amd64.sig ./amazon-guardduty-agent-1.9.1.amd64.sig
-        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.1/publickey.pem ./publickey.pem
+                aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.2/amd64/amazon-guardduty-agent-1.9.2.amd64.deb ./amazon-guardduty-agent-1.9.2.amd64.deb
+        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.2/amd64/amazon-guardduty-agent-1.9.2.amd64.sig ./amazon-guardduty-agent-1.9.2.amd64.sig
+        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.9.2/publickey.pem ./publickey.pem
@@ -315 +315 @@ gpg shows import successfully
-                gpg --verify amazon-guardduty-agent-1.9.1.amd64.sig amazon-guardduty-agent-1.9.1.amd64.deb
+                gpg --verify amazon-guardduty-agent-1.9.2.amd64.sig amazon-guardduty-agent-1.9.2.amd64.deb
@@ -346 +346 @@ Now, retry the verification process.
-        sudo dpkg -i amazon-guardduty-agent-1.9.1.amd64.deb
+        sudo dpkg -i amazon-guardduty-agent-1.9.2.amd64.deb