docs: update Infrastructure Discovery to match current product scope#2085
Open
masteredd wants to merge 1 commit into
Open
docs: update Infrastructure Discovery to match current product scope#2085masteredd wants to merge 1 commit into
masteredd wants to merge 1 commit into
Conversation
…cope Expand resource coverage table from 9 to 25+ AWS services (S3, RDS, DynamoDB, ElastiCache, Redshift, ECS, ECR, EFS, CloudFront, WAF, KMS, Secrets Manager, ACM, SSM, SNS, SQS). Add GuardDuty, Inspector, IAM Access Analyzer as finding sources alongside Security Hub. Update IAM permissions section to reflect the six managed policies in the current CloudFormation template with explicit Deny statements. Expand built-in rules list with S3, RDS, KMS, Secrets Manager, and IAM checks. SEC-2529 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
✅ Deploy Preview for pensive-dubinsky-5f7a00 ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Why
The existing docs covered only the original 9 AWS services from the initial launch. The product now discovers 25+ services and imports findings from 4 AWS security services. The IAM permissions section showed a simplified single-statement policy that no longer matches the actual CloudFormation template.
Changes verified against
discovery-agentsource code (internal/collectors/,deploy/iam/customer-cloudformation.yaml).Test plan
--8<--includesSEC-2529