Document history for the Amazon IoT Device Defender User Guide
The following table describes the documentation releases for Amazon IoT Device Defender.
| Change | Description | Date |
|---|---|---|
Amazon IoT Device Defender detect feature availability change | The Amazon IoT Device Defender detect feature will no longer be available to new customers starting August 31, 2026. Existing customers can continue using the feature. For more information, see Amazon IoT Device Defender detect feature availability change. | June 30, 2026 |
Generally Available | This is the initial public release of Amazon IoT Device Defender. | August 2, 2023 |
Amazon IoT Device Defender now supports monitoring of device disconnect durations | Amazon IoT Device Defender Rules Detect now supports a new disconnect duration metric to monitor the duration of disconnect of each device. With this additional metric, you can track how long a device has been disconnected to learn whether it is operating as expected. You can also configure alarms at predefined threshold levels and be alerted in the case of persistent device connectivity issues. For documentation, see Cloud-side metrics in the Amazon IoT Device Defender Developer Guide. | July 20, 2023 |
Amazon IoT Device Defender Audit feature identifies potential misconfiguration in IoT Policies | Identify flaws, troubleshoot issues, and take the necessary corrective actions using Audit feature. This new feature also helps in identifying IoT policies with permissive allow statements where devices could get access to unintended resources. It also inspects for use of MQTT wildcards in deny statements that could potentially be circumvented by devices when replacing wildcards with specific strings. For more information, refer to Cloud-side metrics in the Amazon IoT Device Defender Developer Guide | December 6, 2022 |
Amazon IoT Device Defender ML Detect Custom Metrics and Dimensions support | Amazon IoT Device Defender now supports a new audit check for revoked intermediate Certificate Authority (CA). If a CA revokes an intermediate CA because it is potentially compromised, then all certificates issued by that intermediate CA are also potentially compromised and invalid. This new audit check identifies active device certificates issued by a revoked intermediate CA, and helps customers review and replace these active device certificates. For more information, refer to Cloud-side metrics in the Amazon IoT Device Defender Developer Guide | November 10, 2022 |
Amazon IoT Device Defender ML Detect Custom Metrics and Dimensions support | ML Detect now supports monitoring of custom metrics | September 14, 2022 |
Amazon IoT Device Management and Amazon IoT Device Defender device metrics support via ListMetricValues API | Access historical device-side, cloud-side, and custom metrics from connected devices that belong to a security profile using ListMetricValues API. In addition to viewing the data in the Amazon IoT management console, you now have the flexibility to programmatically monitor and build your own visualization. For documentation, see Cloud-side metrics in the Amazon IoT Device Defender Developer Guide | April 5, 2022 |
Amazon IoT Device Defender now supports Detect alarm verification states | Verify an alarm based on their investigation of detected behavior anomalies. They can verify an alarm as True positive, Benign positive, False positive, or Unknown and provide a description of their verification. For documentation, see Cloud-side metrics in the Amazon IoT Device Defender Developer Guide. | September 24, 2021 |
Amazon IoT Device Defender Audit One-Click release | Audit One-Click makes it easy for Amazon IoT Core customers to improve their security baseline by making it possible to start auditing their account and IoT devices against security best practices with a single click. Audit One-Click allows customers to turn on an Amazon IoT Device Defender audit with preset configurations including enabling all available audit checks and a daily audit schedule. It also provides contextual explanations for the benefits of regular security audits. Audit One-Click is only available from the Amazon IoT console. For documentation, see Cloud-side metrics in the Amazon IoT Device Defender Developer Guide. | September 22, 2021 |
Amazon IoT Device Defender CloudFormation support | Amazon IoT Device Defender now supports Amazon CloudFormation for creating and configuring Amazon IoT Device Defender resources such as scheduled audits and Security Profiles in a secure, efficient, and repeatable way. To learn more about the Amazon CloudFormation resource types Amazon IoT Device Defender supports, visit Amazon IoT resource type reference. | March 5, 2021 |
Amazon IoT Device Defender adds support for custom metrics | Use Amazon IoT Device Defender to monitor operational health metrics that are unique to your fleet or use case. The alerts can be viewed in the Device Defender console or shared through Amazon Simple Notification Service (SNS). For documentation, see Cloud-side metrics in the Amazon IoT Device Defender Developer Guide. | December 15, 2020 |
Amazon IoT Device Defender launches Audit Finding Suppression | The Audit Finding Suppression feature allows you to choose which audit findings you want to see and turn off non-compliant findings for specific resources. In addition, you can configure audit finding suppressions for a defined period of time or indefinitely. For documentation, see Audit in the Amazon IoT Device Defender Developer Guide. | August 12, 2020 |
Amazon IoT Device Defender now supports Dimensions for topic-based metric monitoring | The Dimensions feature enables customers to filter the metrics that Device Defender Detect evaluates by MQTT topic. Dimensions supports the following cloud-side metrics: number of messages received, message byte size, number of messages sent, source IP, and number of authorization failures. For documentation, see Cloud-side metrics in the Amazon IoT Device Defender Developer Guide. | April 2, 2020 |
Amazon IoT Device Defender ML Detect General Availability | The ML Detect feature of Amazon IoT Device Defender automatically detects device-level operational and security anomalies across your fleet by learning from past data. For documentation, see Cloud-side metrics in the Amazon IoT Device Defender Developer Guide. | March 24, 2020 |
Amazon IoT Device Defender Adds Four New Checks to its Audit Capability | Use Amazon IoT Device Defender Audit to check for devices in your fleet that have overly permissive permissions, have access to services that haven't been used in over 365 days, use OpenSSL versions on Debian-based operating systems that have been identified as having predictable cryptographic keys making them susceptible to brute force attacks, or use Infineon RSA library versions that have been identified to mishandle RSA key generation making them susceptible to hacking. For documentation, see Audit in the Amazon IoT Device Defender Developer Guide. | November 25, 2019 |
Amazon IoT Device Defender Supports Mitigation Actions for Audit Results | Amazon IoT Device Defender supports the ability for customers to apply mitigation actions to audit findings. For documentation, see Audit in the Amazon IoT Device Defender Developer Guide. | August 6, 2019 |
Amazon IoT Device Defender supports monitoring behavior of unregistered devices | Identify unusual behavior for devices that are not registered with Amazon IoT Core registry. For documentation, see Cloud-side metrics in the Amazon IoT Device Defender Developer Guide. | May 15, 2019 |
Amazon IoT Device Defender Now Provides Statistical Anomaly Detection and Data Visualization | Use statistical anomaly detection, and receive alerts when a device is not within the percentile-based threshold. For documentation, see Cloud-side metrics in the Amazon IoT Device Defender Developer Guide. | February 19, 2019 |
Amazon IoT Device Defender now supports monitoring of device disconnect durations | Amazon IoT Device Defender now supports two additional Cloud-side metrics, number of connection attempts, and number of disconnects. For documentation, see Cloud-side metrics in the Amazon IoT Device Defender Developer Guide. | December 19, 2018 |