AWS guardduty: Bump GuardDuty EC2 security agent version from 1.16.0 to 1.17.1

Service: guardduty · 2026-09-27 · Documentation low

File: guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md

Summary

Updated all S3 artifact paths, RPM/DEB package names, signature files, public key paths, and gpg/rpm/dpkg verification and install commands from agent version 1.16.0 to 1.17.1 for both x86_64/amd64 and arm64 architectures.

Security assessment

The diff only updates version numbers in artifact URLs and install/verify commands; no new security guidance or vulnerability is referenced. It is a routine documentation version bump, though it does keep the signature-verification workflow current.

Evidence

+                aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.17.1/x86_64/amazon-guardduty-agent-1.17.1.x86_64.rpm ./amazon-guardduty-agent-1.17.1.x86_64.rpm

Diff

diff --git a/guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md b/guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md
index 9bc85bfa8..57f350c99 100644
--- a//guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md
+++ b//guardduty/latest/ug/installing-gdu-security-agent-ec2-manually.md
@@ -99 +99 @@ Prepare the commands with appropriate public key, signature of x86_64 RPM, signa
-                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.16.0/publickey.pem
+                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.17.1/publickey.pem
@@ -106 +106 @@ Signature of x86_64 RPM
-                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.16.0/x86_64/amazon-guardduty-agent-1.16.0.x86_64.sig
+                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.17.1/x86_64/amazon-guardduty-agent-1.17.1.x86_64.sig
@@ -111 +111 @@ Signature of arm64 RPM
-                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.16.0/arm64/amazon-guardduty-agent-1.16.0.arm64.sig
+                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.17.1/arm64/amazon-guardduty-agent-1.17.1.arm64.sig
@@ -118 +118 @@ Access link for x86_64 RPM
-                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.16.0/x86_64/amazon-guardduty-agent-1.16.0.x86_64.rpm
+                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.17.1/x86_64/amazon-guardduty-agent-1.17.1.x86_64.rpm
@@ -123 +123 @@ Access link for arm64 RPM
-                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.16.0/arm64/amazon-guardduty-agent-1.16.0.arm64.rpm
+                        s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.17.1/arm64/amazon-guardduty-agent-1.17.1.arm64.rpm
@@ -164,3 +164,3 @@ In the following command to download appropriate public key, signature of x86_64
-                aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.16.0/x86_64/amazon-guardduty-agent-1.16.0.x86_64.rpm ./amazon-guardduty-agent-1.16.0.x86_64.rpm
-        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.16.0/x86_64/amazon-guardduty-agent-1.16.0.x86_64.sig ./amazon-guardduty-agent-1.16.0.x86_64.sig
-        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.16.0/publickey.pem ./publickey.pem
+                aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.17.1/x86_64/amazon-guardduty-agent-1.17.1.x86_64.rpm ./amazon-guardduty-agent-1.17.1.x86_64.rpm
+        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.17.1/x86_64/amazon-guardduty-agent-1.17.1.x86_64.sig ./amazon-guardduty-agent-1.17.1.x86_64.sig
+        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-rpm-artifacts/1.17.1/publickey.pem ./publickey.pem
@@ -185 +185 @@ Use the following command to verify the signature
-                gpg --verify amazon-guardduty-agent-1.16.0.x86_64.sig amazon-guardduty-agent-1.16.0.x86_64.rpm
+                gpg --verify amazon-guardduty-agent-1.17.1.x86_64.sig amazon-guardduty-agent-1.17.1.x86_64.rpm
@@ -214 +214 @@ Now, try the verification process again.
-        sudo rpm -ivh amazon-guardduty-agent-1.16.0.x86_64.rpm
+        sudo rpm -ivh amazon-guardduty-agent-1.17.1.x86_64.rpm
@@ -236 +236 @@ In the following templates, replace the value of the AWS Region, AWS account ID,
-                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.16.0/publickey.pem
+                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.17.1/publickey.pem
@@ -243 +243 @@ Signature of amd64
-                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.16.0/amd64/amazon-guardduty-agent-1.16.0.amd64.sig
+                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.17.1/amd64/amazon-guardduty-agent-1.17.1.amd64.sig
@@ -248 +248 @@ Signature of arm64
-                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.16.0/arm64/amazon-guardduty-agent-1.16.0.arm64.sig
+                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.17.1/arm64/amazon-guardduty-agent-1.17.1.arm64.sig
@@ -255 +255 @@ Access link for amd64
-                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.16.0/amd64/amazon-guardduty-agent-1.16.0.amd64.deb
+                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.17.1/amd64/amazon-guardduty-agent-1.17.1.amd64.deb
@@ -260 +260 @@ Access link for arm64
-                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.16.0/arm64/amazon-guardduty-agent-1.16.0.arm64.deb
+                        s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.17.1/arm64/amazon-guardduty-agent-1.17.1.arm64.deb
@@ -300,3 +300,3 @@ In the following commands, replace the account ID with the appropriate AWS accou
-                aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.16.0/amd64/amazon-guardduty-agent-1.16.0.amd64.deb ./amazon-guardduty-agent-1.16.0.amd64.deb
-        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.16.0/amd64/amazon-guardduty-agent-1.16.0.amd64.sig ./amazon-guardduty-agent-1.16.0.amd64.sig
-        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.16.0/publickey.pem ./publickey.pem
+                aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.17.1/amd64/amazon-guardduty-agent-1.17.1.amd64.deb ./amazon-guardduty-agent-1.17.1.amd64.deb
+        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.17.1/amd64/amazon-guardduty-agent-1.17.1.amd64.sig ./amazon-guardduty-agent-1.17.1.amd64.sig
+        aws s3 cp s3://694911143906-eu-west-1-guardduty-agent-deb-artifacts/1.17.1/publickey.pem ./publickey.pem
@@ -317 +317 @@ gpg shows import successfully
-                gpg --verify amazon-guardduty-agent-1.16.0.amd64.sig amazon-guardduty-agent-1.16.0.amd64.deb
+                gpg --verify amazon-guardduty-agent-1.17.1.amd64.sig amazon-guardduty-agent-1.17.1.amd64.deb
@@ -348 +348 @@ Now, retry the verification process.
-        sudo dpkg -i amazon-guardduty-agent-1.16.0.amd64.deb
+        sudo dpkg -i amazon-guardduty-agent-1.17.1.amd64.deb