@turbot/aws-guardduty
Recommended Version
Version
5.6.1
Released On
Aug 04, 2022
Depends On
Resource Types
- AWS > GuardDuty
- AWS > GuardDuty > Detector
- AWS > GuardDuty > Finding
- AWS > GuardDuty > IPSet
- AWS > GuardDuty > ThreatIntelSet
Control Types
- AWS > GuardDuty > Detector > Active
- AWS > GuardDuty > Detector > Approved
- AWS > GuardDuty > Detector > CMDB
- AWS > GuardDuty > Detector > Configured
- AWS > GuardDuty > Detector > Discovery
- AWS > GuardDuty > Detector > Tags
- AWS > GuardDuty > Detector > Usage
- AWS > GuardDuty > Finding > CMDB
- AWS > GuardDuty > Finding > Discovery
- AWS > GuardDuty > IPSet > Active
- AWS > GuardDuty > IPSet > Approved
- AWS > GuardDuty > IPSet > CMDB
- AWS > GuardDuty > IPSet > Discovery
- AWS > GuardDuty > IPSet > Tags
- AWS > GuardDuty > IPSet > Usage
- AWS > GuardDuty > ThreatIntelSet > Active
- AWS > GuardDuty > ThreatIntelSet > Approved
- AWS > GuardDuty > ThreatIntelSet > CMDB
- AWS > GuardDuty > ThreatIntelSet > Discovery
- AWS > GuardDuty > ThreatIntelSet > Tags
- AWS > GuardDuty > ThreatIntelSet > Usage
Policy Types
- AWS > GuardDuty > API Enabled
- AWS > GuardDuty > Approved Regions [Default]
- AWS > GuardDuty > Detector > Active
- AWS > GuardDuty > Detector > Active > Age
- AWS > GuardDuty > Detector > Active > Last Modified
- AWS > GuardDuty > Detector > Approved
- AWS > GuardDuty > Detector > Approved > Custom
- AWS > GuardDuty > Detector > Approved > Regions
- AWS > GuardDuty > Detector > Approved > Usage
- AWS > GuardDuty > Detector > CMDB
- AWS > GuardDuty > Detector > Configured
- AWS > GuardDuty > Detector > Configured > Claim Precedence
- AWS > GuardDuty > Detector > Configured > Source
- AWS > GuardDuty > Detector > Regions
- AWS > GuardDuty > Detector > Tags
- AWS > GuardDuty > Detector > Tags > Template
- AWS > GuardDuty > Detector > Usage
- AWS > GuardDuty > Detector > Usage > Limit
- AWS > GuardDuty > Enabled
- AWS > GuardDuty > Finding > CMDB
- AWS > GuardDuty > Finding > Regions
- AWS > GuardDuty > IPSet > Active
- AWS > GuardDuty > IPSet > Active > Age
- AWS > GuardDuty > IPSet > Active > Last Modified
- AWS > GuardDuty > IPSet > Approved
- AWS > GuardDuty > IPSet > Approved > Custom
- AWS > GuardDuty > IPSet > Approved > Regions
- AWS > GuardDuty > IPSet > Approved > Usage
- AWS > GuardDuty > IPSet > CMDB
- AWS > GuardDuty > IPSet > Regions
- AWS > GuardDuty > IPSet > Tags
- AWS > GuardDuty > IPSet > Tags > Template
- AWS > GuardDuty > IPSet > Usage
- AWS > GuardDuty > IPSet > Usage > Limit
- AWS > GuardDuty > Permissions
- AWS > GuardDuty > Permissions > Levels
- AWS > GuardDuty > Permissions > Levels > Modifiers
- AWS > GuardDuty > Permissions > Lockdown
- AWS > GuardDuty > Permissions > Lockdown > API Boundary
- AWS > GuardDuty > Regions
- AWS > GuardDuty > Tags Template [Default]
- AWS > GuardDuty > ThreatIntelSet > Active
- AWS > GuardDuty > ThreatIntelSet > Active > Age
- AWS > GuardDuty > ThreatIntelSet > Active > Last Modified
- AWS > GuardDuty > ThreatIntelSet > Approved
- AWS > GuardDuty > ThreatIntelSet > Approved > Custom
- AWS > GuardDuty > ThreatIntelSet > Approved > Regions
- AWS > GuardDuty > ThreatIntelSet > Approved > Usage
- AWS > GuardDuty > ThreatIntelSet > CMDB
- AWS > GuardDuty > ThreatIntelSet > Regions
- AWS > GuardDuty > ThreatIntelSet > Tags
- AWS > GuardDuty > ThreatIntelSet > Tags > Template
- AWS > GuardDuty > ThreatIntelSet > Usage
- AWS > GuardDuty > ThreatIntelSet > Usage > Limit
- AWS > Turbot > Event Handlers > Events > Rules > Event Sources > @turbot/aws-guardduty
- AWS > Turbot > Permissions > Compiled > API Boundary > @turbot/aws-guardduty
- AWS > Turbot > Permissions > Compiled > Levels > @turbot/aws-guardduty
- AWS > Turbot > Permissions > Compiled > Service Permissions > @turbot/aws-guardduty
Release Notes
5.6.1 (2022-08-04)
Bug fixes
- The
AWS > GuardDuty > Finding > CMDB
control would incorrectly move to an error state when the finding was not available in AWS. This is fixed and such resources will now be deleted from Turbot.
5.6.0 (2022-05-24)
What's new?
- Users can now create their own custom checks against resource attributes in the Approved control using the
Approved > Custom
policy. These custom checks would be a part of the evaluation of the Approved control. Custom messages can also be added which are then displayed in the control details table. See Custom Checks for more information.
Bug fixes
- We've improved the process of deleting resources from Turbot if their CMDB policy was set to
Enforce: Disabled
. The CMDB controls will now not look to resolve credentials via Turbot's IAM role while deleting resources from Turbot. This will allow the CMDB controls to process resource deletions from Turbot more reliably than before.
Resource Types
Added
- AWS > GuardDuty > Finding
Control Types
Added
- AWS > GuardDuty > Finding > CMDB
- AWS > GuardDuty > Finding > Discovery
Policy Types
Added
- AWS > GuardDuty > Detector > Approved > Custom
- AWS > GuardDuty > Finding > CMDB
- AWS > GuardDuty > Finding > Regions
- AWS > GuardDuty > IPSet > Approved > Custom
- AWS > GuardDuty > ThreatIntelSet > Approved > Custom
Action Types
Added
- AWS > GuardDuty > Finding > Router
5.5.0 (2021-06-25)
What's new?
AWS/GuardDuty/Admin
now includes publishing destination permissions.
5.4.1 (2020-09-22)
Bug fixes
- We've made some improvements to our real-time event handling that reduces the risk of creating resources in CMDB with malformed AKAs. There's no noticeable difference, but things should run more reliably now.
5.4.0 (2020-09-02)
What's new?
- Discovery controls now have their own control category,
CMDB > Discovery
, to allow for easier filtering separately from other CMDB controls. - We've renamed the service's default regions policy from
Regions [Default]
toRegions
to be consistent with our other regions policies.
5.3.4 (2020-08-12)
Bug fixes
- In various Active controls, we were outputting log messages that did not properly show how many days were left until we'd delete the inactive resources (we were still deleting them after the correct number of days). These log messages have been fixed and now contain the correct number of days.
5.3.3 (2020-07-23)
Bug fixes
AWS/GuardDuty/Admin
now includes deleting invitation permissions.
5.3.2 (2020-07-06)
Bug fixes
- Updated various resource configurations to provide better compatibility with AWS China regions.
5.3.1 (2020-06-15)
What's new?
- All resource Router actions now run even if Turbot is outside of its allowed change window. This allows Turbot to maintain an up-to-date CMDB by handling resource updates at all times. Note that this only affects Turbot's ability to process resources changes that were made in the cloud provider - enforcement actions are still disabled outside of the change window.
5.3.0 (2020-05-26)
Control Types
Added
- AWS > GuardDuty > Detector > Configured
Policy Types
Added
- AWS > GuardDuty > Detector > Configured
- AWS > GuardDuty > Detector > Configured > Claim Precedence
- AWS > GuardDuty > Detector > Configured > Source
5.2.0 (2020-05-14)
What's new?
- Detector CMDB data now contains information on whether the account is a master or member account, along with details of its member accounts if it is a master account.
Bug fixes
- Removed
AWS > GuardDuty > Detector > Configuration
,AWS > GuardDuty > IP Set > Configuration
, andAWS > GuardDuty > Threat Intel Set > Configuration
policies as they were not being used by any controls.
Policy Types
Removed
- AWS > GuardDuty > Detector > Configuration
- AWS > GuardDuty > IPSet > Configuration
- AWS > GuardDuty > ThreatIntelSet > Configuration