AWS govcloud-us documentation change
Summary
Simplified section headers and updated wording for GuardDuty differences in AWS GovCloud regions. Changed 'not supported' to 'not available' for clarity and removed redundant region references.
Security assessment
Changes are editorial improvements clarifying existing limitations of GuardDuty in GovCloud regions. No security vulnerabilities are addressed, patched, or disclosed. Updates describe pre-existing service limitations without indicating any security incident resolution.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-guardduty.md b/govcloud-us/latest/UserGuide/govcloud-guardduty.md index 1d7e28e5d..3c70cff69 100644 --- a//govcloud-us/latest/UserGuide/govcloud-guardduty.md +++ b//govcloud-us/latest/UserGuide/govcloud-guardduty.md @@ -7 +7 @@ -How Amazon GuardDuty differs for AWS GovCloud (US) RegionsDocumentation for Amazon GuardDutyExport-controlled content +How Amazon GuardDuty differsDocumentationExport-controlled content @@ -13 +13 @@ Amazon GuardDuty is a continuous security monitoring service. Amazon GuardDuty c -## How Amazon GuardDuty differs for AWS GovCloud (US) Regions +## How Amazon GuardDuty differs @@ -15 +15 @@ Amazon GuardDuty is a continuous security monitoring service. Amazon GuardDuty c -The following list indicates the differences in the feature availability in AWS GovCloud (US) Regions: +The following differences apply to Amazon GuardDuty: @@ -53 +53 @@ AWS GovCloud (US-West) - `383110348953.dkr.ecr.us-gov-west-1.amazonaws.com/aws-g - * The entity lists capability in [Customizing threat detection with entity lists and IP address lists](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html) is not supported in AWS GovCloud (US) Regions. GuardDuty continues to support IP address lists. + * The entity lists capability in [Customizing threat detection with entity lists and IP address lists](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html) is not available in AWS GovCloud (US) Regions. GuardDuty continues to support IP address lists. @@ -55 +55 @@ AWS GovCloud (US-West) - `383110348953.dkr.ecr.us-gov-west-1.amazonaws.com/aws-g - * The [Extended Threat Detection](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html) coverage for EKS clusters supports detecting multi-stage attacks through available EKS Protection finding types (EKS audit log monitoring) and AWS API activity in AWS GovCloud (US) Regions. + * The [Extended Threat Detection](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html) coverage for EKS clusters supports detecting multi-stage attacks through available EKS Protection finding types (EKS audit log monitoring) and AWS API activity. @@ -75 +75 @@ AWS GovCloud (US-West) - `383110348953.dkr.ecr.us-gov-west-1.amazonaws.com/aws-g - * In [Malware Protection for EC2](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html), the support for scanning instances with `productCode` as `marketplace` is not supported. GuardDuty will skip the malware scan for such instances and log the skip reason as `UNSUPPORTED_PRODUCT_CODE_TYPE`. + * In [Malware Protection for EC2](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html), the support for scanning instances with `productCode` as `marketplace` is not available. GuardDuty will skip the malware scan for such instances and log the skip reason as `UNSUPPORTED_PRODUCT_CODE_TYPE`. @@ -77 +77 @@ AWS GovCloud (US-West) - `383110348953.dkr.ecr.us-gov-west-1.amazonaws.com/aws-g - * In [Malware Protection for Backup](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection-backup.html), the scanning of EC2 and EBS Recovery points is not supported. In these cases GuardDuty will not perform a scan on the input recovery point resource. + * In [Malware Protection for Backup](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection-backup.html), the scanning of EC2 and EBS Recovery points is not available. In these cases GuardDuty will not perform a scan on the input recovery point resource. @@ -79 +79 @@ AWS GovCloud (US-West) - `383110348953.dkr.ecr.us-gov-west-1.amazonaws.com/aws-g - * Cross-region data transfer is not supported in AWS GovCloud (US) Regions. + * Cross-region data transfer is not available. @@ -81 +81 @@ AWS GovCloud (US-West) - `383110348953.dkr.ecr.us-gov-west-1.amazonaws.com/aws-g - * Member accounts invitation notifications through AWS Health Dashboard and email are not supported in AWS GovCloud (US) Regions. + * Member accounts invitation notifications through AWS Health Dashboard and email are not available. @@ -87 +87 @@ AWS GovCloud (US-West) - `383110348953.dkr.ecr.us-gov-west-1.amazonaws.com/aws-g - * The following IAM finding types are not supported in the AWS GovCloud (US) Regions: + * The following IAM finding types are not available in the AWS GovCloud (US) Regions: @@ -94 +94 @@ AWS GovCloud (US-West) - `383110348953.dkr.ecr.us-gov-west-1.amazonaws.com/aws-g -## Documentation for Amazon GuardDuty +## Documentation