AWS Security ChangesHomeSearch

AWS guardduty: Add GuardDuty security agent v1.17.1 release notes and image digests

Service: guardduty · 2026-09-27 · Documentation low

File: guardduty/latest/ug/runtime-monitoring-agent-release-history.md

Summary

Adds v1.17.1 entries to the SSM distributor, EKS add-on, and container image release history tables, including kernel 7.2 support, guardduty-data-v2 link-local endpoint connectivity behavior, and new x86_64/ARM64 image SHA256 digests.

Security assessment

This is a routine agent release-history update documenting new kernel support, endpoint connectivity behavior, and image digests. It provides supply-chain-relevant image hashes but does not fix a specific vulnerability.

Evidence

+v1.17.1 | v1.17.1 |  Added support for Kernel 7.2. At startup, the agent detects the GuardDuty connectivity type and attempts to connect to the guardduty-data-v2 endpoint via link-local. General security feature updates. | Sep 9, 2026

Diff

diff --git a/guardduty/latest/ug/runtime-monitoring-agent-release-history.md b/guardduty/latest/ug/runtime-monitoring-agent-release-history.md
index 846100f5f..0fa1101a8 100644
--- a//guardduty/latest/ug/runtime-monitoring-agent-release-history.md
+++ b//guardduty/latest/ug/runtime-monitoring-agent-release-history.md
@@ -33,0 +34 @@ SSM distributor version | Agent version | Release notes | Availability date
+v1.17.1 | v1.17.1 |  Added support for Kernel 7.2. At startup, the agent detects the GuardDuty connectivity type and attempts to connect to the guardduty-data-v2 endpoint via link-local. General security feature updates. | Sep 9, 2026  
@@ -56,0 +58 @@ SSM Distributor version | Agent version | Release notes | Availability date
+v1.17.1 | v1.17.1 |  Added support for Kernel 7.2. At startup, the agent detects the GuardDuty connectivity type and attempts to connect to the guardduty-data-v2 endpoint via link-local. General security feature updates. | Sep 9, 2026  
@@ -62,0 +65 @@ Agent version | Container image | Release notes | Availability date
+v1.17.1 |  **x86_64 (AMD64)** : `sha256:27b27c489113ae83a272b5c98112e043f66faf8379838bb38e2d815dd6dfbf3a` **Graviton (ARM64)** : `sha256:195078e48505cb05b06e61df255fc85a6d7917b28678956c75b11e69855bdff3` |  Added support for Kernel 7.2. At startup, the agent detects the GuardDuty connectivity type and attempts to connect to the guardduty-data-v2 endpoint via link-local. General security feature updates. | September 09, 2026  
@@ -85,0 +89 @@ Agent version | Container image | Release notes | Availability date | End of sta
+v1.17.1 |  **x86_64 (AMD64)** : `sha256:8d772f754e9af50a63ab6af74ea24c12a5a3fb8a803c7cbc35ffaca3746c0540` **Graviton (ARM64)** : `sha256:e5531367e9ffa539e409e99bbf49e804f01fdd894ee9322858b9bca703cd4016` |  Added support for Kernel 6.19, 7.0, 7.1. At startup, the agent detects the GuardDuty connectivity type and attempts to connect to the guardduty-data-v2 endpoint via link-local. General security feature updates. | September 09, 2026 | –