AWS guardduty documentation change
Summary
Added entry for AmazonGuardDutyServiceRolePolicy update with new S3 and ECS permissions for retrieving bucket listings and task information
Security assessment
This change documents updates to IAM policy permissions for GuardDuty, specifically adding s3:ListBucket, ecs:DescribeTasks, and ecs:DescribeTaskDefinition permissions. While these are security-related permissions updates, there is no evidence they address a specific security vulnerability. The change enhances GuardDuty's monitoring capabilities but doesn't indicate a security issue was fixed.
Diff
diff --git a/guardduty/latest/ug/security-iam-awsmanpol.md b/guardduty/latest/ug/security-iam-awsmanpol.md index 8b5684436..0b3ec82b2 100644 --- a//guardduty/latest/ug/security-iam-awsmanpol.md +++ b//guardduty/latest/ug/security-iam-awsmanpol.md @@ -111,0 +112 @@ Change | Description | Date +[AmazonGuardDutyServiceRolePolicy](./slr-permissions.html) – Update to an existing policy | Added `s3:ListBucket` permission to retrieve S3 bucket listings, and `ecs:DescribeTasks` and `ecs:DescribeTaskDefinition` permissions to retrieve information about Amazon ECS tasks and task definitions. | April 23, 2026