AWS cli documentation change
Summary
Updated AWS CLI GuardDuty get-findings command reference to version 2.34.25, restructured and expanded Kubernetes and Lambda details, added validation constraints, and increased maximum values for some parameters
Security assessment
This change documents new fields in GuardDuty findings related to Kubernetes security monitoring (ServiceAccountName, KubernetesPermissionCheckedDetails, KubernetesRoleBindingDetails, KubernetesRoleDetails) and Lambda function details. While these changes enhance security monitoring capabilities by providing more detailed information about Kubernetes permissions and Lambda configurations, there is no evidence in the diff that this addresses a specific security vulnerability or incident. The changes appear to be routine documentation updates for new features in GuardDuty's security monitoring capabilities.
Diff
diff --git a/cli/latest/reference/guardduty/get-findings.md b/cli/latest/reference/guardduty/get-findings.md index de3830903..5a4908b87 100644 --- a//cli/latest/reference/guardduty/get-findings.md +++ b//cli/latest/reference/guardduty/get-findings.md @@ -15 +15 @@ - * [AWS CLI 2.34.23 Command Reference](../../index.html) » + * [AWS CLI 2.34.25 Command Reference](../../index.html) » @@ -876,0 +877,4 @@ Findings -> (list) +>>>>> ServiceAccountName -> (string) +>>>>> +>>>>>> The service account name that is associated with a Kubernetes workload. +>>>>> @@ -953,4 +956,0 @@ Findings -> (list) ->>>>> ServiceAccountName -> (string) ->>>>> ->>>>>> The service account name that is associated with a Kubernetes workload. ->>>>> @@ -1268,0 +1269,78 @@ Findings -> (list) +>>> LambdaDetails -> (structure) +>>> +>>>> Contains information about the Lambda function that was involved in a finding. +>>>> +>>>> FunctionArn -> (string) +>>>> +>>>>> Amazon Resource Name (ARN) of the Lambda function. +>>>> +>>>> FunctionName -> (string) +>>>> +>>>>> Name of the Lambda function. +>>>> +>>>> Description -> (string) +>>>> +>>>>> Description of the Lambda function. +>>>> +>>>> LastModifiedAt -> (timestamp) +>>>> +>>>>> The timestamp when the Lambda function was last modified. This field is in the UTC date string format `(2023-03-22T19:37:20.168Z)` . +>>>> +>>>> RevisionId -> (string) +>>>> +>>>>> The revision ID of the Lambda function version. +>>>> +>>>> FunctionVersion -> (string) +>>>> +>>>>> The version of the Lambda function. +>>>> +>>>> Role -> (string) +>>>> +>>>>> The execution role of the Lambda function. +>>>> +>>>> VpcConfig -> (structure) +>>>> +>>>>> Amazon Virtual Private Cloud configuration details associated with your Lambda function. +>>>>> +>>>>> SubnetIds -> (list) +>>>>> +>>>>>> The identifiers of the subnets that are associated with your Lambda function. +>>>>>> +>>>>>> (string) +>>>>> +>>>>> VpcId -> (string) +>>>>> +>>>>>> The identifier of the Amazon Virtual Private Cloud. +>>>>> +>>>>> SecurityGroups -> (list) +>>>>> +>>>>>> The identifier of the security group attached to the Lambda function. +>>>>>> +>>>>>> (structure) +>>>>>> +>>>>>>> Contains information about the security groups associated with the EC2 instance. +>>>>>>> +>>>>>>> GroupId -> (string) +>>>>>>> +>>>>>>>> The security group ID of the EC2 instance. +>>>>>>> +>>>>>>> GroupName -> (string) +>>>>>>> +>>>>>>>> The security group name of the EC2 instance. +>>>> +>>>> Tags -> (list) +>>>> +>>>>> A list of tags attached to this resource, listed in the format of `key` :`value` pair. +>>>>> +>>>>> (structure) +>>>>> +>>>>>> Contains information about a tag key-value pair. +>>>>>> +>>>>>> Key -> (string) +>>>>>> +>>>>>>> Describes the key associated with the tag. +>>>>>> +>>>>>> Value -> (string) +>>>>>> +>>>>>>> Describes the value associated with the tag key. +>>> @@ -1381,78 +1458,0 @@ Findings -> (list) ->>> LambdaDetails -> (structure) ->>> ->>>> Contains information about the Lambda function that was involved in a finding. ->>>> ->>>> FunctionArn -> (string) ->>>> ->>>>> Amazon Resource Name (ARN) of the Lambda function. ->>>> ->>>> FunctionName -> (string) ->>>> ->>>>> Name of the Lambda function. ->>>> ->>>> Description -> (string) ->>>> ->>>>> Description of the Lambda function. ->>>> ->>>> LastModifiedAt -> (timestamp) ->>>> ->>>>> The timestamp when the Lambda function was last modified. This field is in the UTC date string format `(2023-03-22T19:37:20.168Z)` . ->>>> ->>>> RevisionId -> (string) ->>>> ->>>>> The revision ID of the Lambda function version. ->>>> ->>>> FunctionVersion -> (string) ->>>> ->>>>> The version of the Lambda function. ->>>> ->>>> Role -> (string) ->>>> ->>>>> The execution role of the Lambda function. ->>>> ->>>> VpcConfig -> (structure) ->>>> ->>>>> Amazon Virtual Private Cloud configuration details associated with your Lambda function. ->>>>> ->>>>> SubnetIds -> (list) ->>>>> ->>>>>> The identifiers of the subnets that are associated with your Lambda function. ->>>>>> ->>>>>> (string) ->>>>> ->>>>> VpcId -> (string) ->>>>> ->>>>>> The identifier of the Amazon Virtual Private Cloud. ->>>>> ->>>>> SecurityGroups -> (list) ->>>>> ->>>>>> The identifier of the security group attached to the Lambda function. ->>>>>> ->>>>>> (structure) ->>>>>> ->>>>>>> Contains information about the security groups associated with the EC2 instance. ->>>>>>> ->>>>>>> GroupId -> (string) ->>>>>>> ->>>>>>>> The security group ID of the EC2 instance. ->>>>>>> ->>>>>>> GroupName -> (string) ->>>>>>> ->>>>>>>> The security group name of the EC2 instance. ->>>> ->>>> Tags -> (list) ->>>> ->>>>> A list of tags attached to this resource, listed in the format of `key` :`value` pair. ->>>>> ->>>>> (structure) ->>>>> ->>>>>> Contains information about a tag key-value pair. ->>>>>> ->>>>>> Key -> (string) ->>>>>> ->>>>>>> Describes the key associated with the tag. ->>>>>> ->>>>>> Value -> (string) ->>>>>> ->>>>>>> Describes the value associated with the tag key. ->>> @@ -1885,0 +1886,16 @@ Findings -> (list) +>>>>> Resource -> (string) +>>>>> +>>>>>> The resource component in the Kubernetes API call action. +>>>>> +>>>>> Subresource -> (string) +>>>>> +>>>>>> The name of the sub-resource in the Kubernetes API call action. +>>>>> +>>>>> Namespace -> (string) +>>>>> +>>>>>> The name of the namespace where the Kubernetes API call action takes place. +>>>>> +>>>>> ResourceName -> (string) +>>>>> +>>>>>> The name of the resource in the Kubernetes API call action. +>>>>> @@ -1966,0 +1983,4 @@ Findings -> (list) +>>>> +>>>> KubernetesPermissionCheckedDetails -> (structure) +>>>> +>>>>> Information whether the user has the permission to use a specific Kubernetes API. @@ -1968 +1988 @@ Findings -> (list) ->>>>> Resource -> (string) +>>>>> Verb -> (string)