Skip to content

What's New

We will cover a running list of new features and releases with the latest always placed at the top.


December 2020 - v4.04.004

In this release:

  • Simplified KMS access
    • Added option to the CloudFormation template to grant access to all KMS keys
    • Access to all KMS keys leverages the permission option viaService to specify limited scope access to only Amazon S3 objects. The keys cannot be used for any other purpose.
    • Simply keep the default in the CFT or rerun the CFT to change the value at a later time
    • You can still grant one off access as well
    • Get more details on assigning access here.
  • Granular Prepaid License Management
    • You can now buy prepaid data amounts for Retro scanning independently from Go Forward scanning
    • You can now keep track of the license files that have been applied to the deployment
  • Global (almost) Tagging for all solution resources
    • Tags can help you manage, identify, organize, search for, and filter resources. You can create tags to categorize resources by purpose, owner, environment, or other criteria.
    • Resources we tag:
      • ECS Clusters, App Config Doc, App Config Schema, App Config Profile, SNS Topic, SQS Queues, Agent Task Def, Agent ECS Service, Security Groups, CloudWatch Metric Alarms, CloudWatch Retro Alarms, S3 Quarantine Buckets, DynamoDB tables, ECS Console Service, Console Task Def
    • Resources we are currently not tagging:
      • CloudFormation Stack, Cognito, running Tasks
      • You can manually tag the remaining items
  • Various bug fixes and improvements
    • Many small bugs have been fixed, as well as tweaks to the UI behavior and appearance.

November 2020 - v4.03.001

In this release:

  • Local Signature Updates (Private Mirror):
    • In certain situations, you may prefer to have the scanning agents retrieve signature updates locally rather than reaching out over the internet. Local updates would allow you to better control and potentially eliminate outbound access for the VPCs housing the scanning agents.
    • This new option allows you to specify an Amazon S3 bucket in your account for the scanning agents to look to for signature updates. You can get the updates into this bucket however you see fit (we provide a sample lambda function that can be used) and each scanning agent as it boots up and then every 6 hours after that will pick up the updates.
    • Get more details for Private Mirror (local updates)
  • Image Distribution:
    • Added Console and Scanning Agent task images to every standard AWS region as part of the build process. This enables local delivery of the Console task image as well as the Scanning Agent task image from the regions each is deployed within.
  • Various bug fixes and improvements
    • Many small bugs have been fixed, as well as tweaks to the UI behavior and appearance.
    • Changing VPC settings for agents was failing due to a Security Group issue. New security groups are now created for each vpc switched to

October 2020 - v4.02.000

In this release:

  • Bucket Attributes:
    • Public settings awareness
      • Provide better awareness around the public settings for buckets. Give you a feel if a bucket is capable of being public (yellow lock) and/or whether ACL or Bucket Policies are making it truly public (yellow lock)
    • KMS encryption status
      • This makes you aware of whether a bucket is protected by Custom KMS and prevent you from scanning the objects within the bucket until the AgentRole has permissions to the key
      • red key = encrypted and AgentRole doesn't have permissions
      • green key = encrypted and AgentRole does have permissions
    • Get more details for Bucket Attributes
  • Problem Files filtering:
    • Added 3 filter options: Accounts, Problem Types and Date Range that allows you to get more specific and useful results
    • Get more details for Problem Files page updates
  • Various bug fixes and improvements
    • Many small bugs have been fixed, as well as tweaks to the UI behavior and appearance.
    • Metering submission bug which was causing agents to shut down after 24 hours of non-submissions

October 2020 - v4.01.002

In this release:

  • Additional System Configuration in the console
    • New Console Settings:
      • Added the ability to change the inbound CIDR rules for console access
      • Added the ability to change the VPC and Subnets the console runs in
      • Better inform you of suitable VPCs and Subnets (public / private)
    • New Agent Settings:
      • Added the ability to change the VPC and Subnets the agent(s) runs in
      • Better inform you of suitable VPCs and Subnets (public / restricted)
    • Get more details for Console Settings and Agent Settings
  • Proactive Notifications update
    • Added 6 new notification types: bucketsDiscovered, bucketProtection, bucketCrawling, bucketsPublicAccess, updatesAvailable, trialExpiring
    • Get more details on Proactive Notifications
  • Various bug fixes and improvements
    • Many small bugs have been fixed, as well as tweaks to the UI behavior and appearance.
    • Performance issues found while crawling objects
    • Bug related to long bucket names or long object paths when retro scanning

September 2020 - v4.00.009

In this release:

  • Group Organization
    • New Groups feature for deployments that need to better organize views into the accounts, buckets, scan results, users and dashboard views
    • You are now able to collect accounts and users into groups creating logical separation from other groups. This may be to separate departments (dev/test/prod or HR/Sales/Finance) within a company or to separate customers from one another in a services model
    • Get more details on Groups Management
  • Deployment Overview
    • This new page gives you a quick view into what is deployed within your infrastructure (event scanning, retro scanning) and the bucket protection status by region
    • This page also gives you the ability to cleanup parts of the installation or uninstall the entire application
    • Get more details for Deployment Overview
  • Proactive Notifications update
    • Added the bucket name to the scanResult notifications so filtering can be done by bucket as well
    • Get more details on Proactive Notifications
  • Various bug fixes and improvements
    • Many small bugs have been fixed, as well as tweaks to the UI behavior and appearance.

August 2020 - v3.02.004

In this release:

  • Scan Results Notifications
    • The object scan results are now sent to a new SNS Topic where you can subscribe to receive notifications based on your protocol (HTTP, HTTPS, Email, Email-JSON, Amazon SQS, AWS Lambda, Platform Application Endpoint, SMS) of choice
    • scanResult attribute is added to each message so you can filter down to the object results (Clean, Infected, Unscannable, Error) you care about
    • Get more details on Proactive Notifications
  • System Configuration from the Console
    • We've now simplified the process to change the system configuration by providing you a mechanism to configure: scaling thresholds, cpu, memory and min/max agents from within the console
    • You can set default settings that will apply to all regions as they come online or make specific configurations by region
    • Get more details for Console Settings and Agent Settings
  • Smart Scan Configuration
    • This new option will allow you to run the scanning agents only when there is work to be done. This option will modify scaling alarms to allow for the complete shutdown of scanning agents when the work queues are empty. This will save you money for those periods of times you do not have objects coming in.
    • You will have the option to determine at what point in the work queue you would like an agent to spin up to start processing. The default is any time there is work to be done (so at least 1 entry in the queue), but you can configure this as you choose
    • This mode can be turned on by default for all deployed agents or on a per region basis
    • This effectively turns the scanning agent container into a Lambda firing up when needed, but better from the perspective as it can persist for as long as there is work to be done with no limitations.
    • Get more details for Smart Scan
  • Various bug fixes and improvements
    • Many small bugs have been fixed, as well as tweaks to the UI behavior and appearance.

August 2020 - v3.01.001

In this release:

  • Dashboard Improvements
    • Informational widgets have been added across the top of the dashboard to give more insight into your storage protection. Top Row Widgets Data
    • Get more details here
  • Public Access identifier on buckets
    • An identifier (public lock) has been added to buckets that have public access granted on them.
  • Various bug fixes and improvements
    • Many small bugs have been fixed, as well as tweaks to the UI behavior and appearance.

July 2020 - v3.0.0

In this release:

  • Cross Account Scanning
    • With this release you can centrally install the console and scanning agents to perform scanning on S3 objects in both the deployed account (primary) as well as remote accounts (linked accounts). This simplifies deployment, adds cost efficiencies and allows you to better meet AWS security best practices.
    • Review how this works here
  • User Management
    • This new page gives you a clear list of users as well as allows you to add, modify and delete users within the console. You can change user roles as well as activate / deactivate them.
    • Overview of the new user management can be found here
  • Various bug fixes and improvements
    • Many small bugs have been fixed, as well as tweaks to the UI behavior and appearance.

July 2020 - v2.05.006

In this release:

  • Scan Existing Files
    • When enabling protection on a bucket, you will be prompted to select whether or not to scan files that were added to the bucket while it was not protected. This may be all files in the bucket, or files between a date range if you had previously protected this bucket.
    • From the "Actions" menu on the Bucket Protection page, you may choose "Scan Existing Files..." and will be presented with a dialog to scan existing files. You are able to select the date range as well as how many Agents you would like to use for scanning these files.
    • Review how this works here
  • Improved Updates
    • Applying Console updates will now perform an Update Stack operation in order to more smoothly add new features that require changes to the CloudFormation template
    • Overview of updating can be found here
  • Problem Files page
    • View a table containing information about files that were found to be infected or were too large to be scanned
    • Page overview can be found here
  • Various bug fixes and improvements
    • Many small bugs have been fixed, as well as tweaks to the UI behavior and appearance.

June 2020 - v2.01.008

This is the initial public release of the Antivirus for Amazon S3 scanning product. Cloud Storage Security is introducing an event driven scanning engine and infrastructure for Amazon S3.

In this release:

  • Deploy in minutes from AWS Marketplace Subscription
  • Simple management through Console
    • Easily turn on / off buckets for malware scanning
    • Deploy scanning Agents to multiple regions from centralized Console
    • Upgrade Console and scanning Agents in-place
    • Charts to clearly monitor usage, throughput, malicious files and protection status
    • Custom subdomain access into your console
  • Lightweight containers running on AWS Fargate
    • No EC2 instances to manage
    • Highly scalable
  • Free Trial - give it a go for 30 days! Trial extensions available when needed.
  • Pre-paid Purchase option - ability to buy GBs to scan in bulk
    • Contact Us if you would like to pursue this option

Last update: December 2, 2020