AWS guardduty documentation change

Service: guardduty · 2026-07-10 · Documentation low

File: guardduty/latest/ug/monitor-with-eventbridge-s3-malware-protection.md

Summary

Added new threat detail fields (source, itemDetails, hash, itemPath) to malware detection event schema example.

Security assessment

Enhances security documentation by providing additional malware analysis context. No security vulnerability is addressed; this improves existing security feature capabilities.

Diff

diff --git a/guardduty/latest/ug/monitor-with-eventbridge-s3-malware-protection.md b/guardduty/latest/ug/monitor-with-eventbridge-s3-malware-protection.md
index 640ef88ad..f5a87fada 100644
--- a//guardduty/latest/ug/monitor-with-eventbridge-s3-malware-protection.md
+++ b//guardduty/latest/ug/monitor-with-eventbridge-s3-malware-protection.md
@@ -242 +242,6 @@ Show moreShow less
-                        "name": "EICAR-Test-File (not a virus)"
+                        "name": "EICAR-Test-File (not a virus)",
+                        "source": "AMAZON",
+                        "itemDetails": [{
+                            "hash": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+                            "itemPath": "APKAEIBAERJR2EXAMPLE"
+                        }]