AWS Security ChangesHomeSearch

AWS cli: GuardDuty get-custom-detection-rule: add RuntimeMonitoring details

Service: cli · 2026-10-15 · Documentation low

File: cli/latest/reference/guardduty/get-custom-detection-rule.md

Summary

Adds RuntimeMonitoring to the rule type enum and documents RuntimeMonitoringDetails including per-platform (EKS, EC2, ECS Fargate) minimum agent version requirements; bumps CLI reference version to 2.38.1.

Security assessment

Documents GuardDuty Runtime Monitoring rule metadata (a threat-detection capability) but does not address a specific vulnerability or incident; it is security-tooling documentation.

Evidence

> RuntimeMonitoringDetails -> (structure)

Diff

diff --git a/cli/latest/reference/guardduty/get-custom-detection-rule.md b/cli/latest/reference/guardduty/get-custom-detection-rule.md
index 1cb7ea3..76e3d2d 100644
--- a//cli/latest/reference/guardduty/get-custom-detection-rule.md
+++ b//cli/latest/reference/guardduty/get-custom-detection-rule.md
@@ -15 +15 @@
-  * [AWS CLI 2.38.0 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
@@ -287,0 +288 @@ Rule -> (structure)
+>>   * `RuntimeMonitoring`
@@ -357,0 +359,56 @@ Rule -> (structure)
+> 
+> RuntimeMonitoringDetails -> (structure)
+>
+>> Runtime Monitoring-specific details for the rule, including the platforms on which the rule can run and the minimum GuardDuty agent version required on each.
+>> 
+>> Platforms -> (structure)
+>>
+>>> The platforms on which the rule can run. The presence of a platform member indicates that the rule is supported on that platform; the absence of a member indicates that the rule cannot run on that platform at any agent version.
+>>> 
+>>> Eks -> (structure)
+>>>
+>>>> The requirements for running the rule on Amazon EKS.
+>>>> 
+>>>> MinAgentVersion -> (string)
+>>>>
+>>>>> The minimum GuardDuty agent version required to run the rule on Amazon EKS.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `64`
+>>>>>   * pattern: `[0-9]+(\.[0-9]+){1,3}`
+>>>>> 
+
+>>> 
+>>> Ec2 -> (structure)
+>>>
+>>>> The requirements for running the rule on Amazon EC2.
+>>>> 
+>>>> MinAgentVersion -> (string)
+>>>>
+>>>>> The minimum GuardDuty agent version required to run the rule on Amazon EC2.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `64`
+>>>>>   * pattern: `[0-9]+(\.[0-9]+){1,3}`
+>>>>> 
+
+>>> 
+>>> EcsFargate -> (structure)
+>>>
+>>>> The requirements for running the rule on Amazon ECS with the Fargate launch type.
+>>>> 
+>>>> MinAgentVersion -> (string)
+>>>>
+>>>>> The minimum GuardDuty agent version required to run the rule on Amazon ECS with the Fargate launch type.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `64`
+>>>>>   * pattern: `[0-9]+(\.[0-9]+){1,3}`
+>>>>> 
+
@@ -377 +434 @@ Rule -> (structure)
-  * [AWS CLI 2.38.0 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.1 Command Reference](../../index.html) »