AWS guardduty documentation change
Summary
Updated description of Amazon ECS actions to include retrieving information about tasks and task definitions
Security assessment
This change clarifies the permissions documentation for GuardDuty's service-linked role, specifically noting the ability to retrieve information about ECS tasks and task definitions. This is security documentation that explains what permissions the service requires, but doesn't indicate a security issue was addressed.
Diff
diff --git a/guardduty/latest/ug/slr-permissions.md b/guardduty/latest/ug/slr-permissions.md index a71c236be..bfc7ff63b 100644 --- a//guardduty/latest/ug/slr-permissions.md +++ b//guardduty/latest/ug/slr-permissions.md @@ -29 +29 @@ The permission policies help GuardDuty perform the following tasks: - * Use Amazon ECS actions to manage and retrieve information about the Amazon ECS clusters, and manage the Amazon ECS account setting with `guarddutyActivate`. The actions pertaining to Amazon ECS also retrieve the information about the tags associated with GuardDuty. + * Use Amazon ECS actions to manage and retrieve information about the Amazon ECS clusters, retrieve information about tasks and task definitions, and manage the Amazon ECS account setting with `guarddutyActivate`. The actions pertaining to Amazon ECS also retrieve the information about the tags associated with GuardDuty.