Malware protection plan UNSUPPORTED tag

Question

We use the GuardDuty Malware Protection Plan with tagging but for some objects the tagging returns UNSUPPORTED. Those object are pdf document but with Password Encrypted security. We saw in the documentation that this is the reason fo why they are tagged as UNSUPPORTED.

We would like to know :
  - Is it planned to handle those type of documents ?
  - Is there another way to scan them anyway ?
  - If not how are we supposed to handle this UNSUPPORTED tag ? What is the best practice ?

Mary Jennings · Answer

Currently, AWS doesn’t support scanning encrypted files like password-protected PDFs because the malware scanning engines can’t access their contents without the password. There’s no official timeline yet for supporting these types of files, so for now, the best approach is to handle the UNSUPPORTED tag as a flag for manual review or alternative scanning methods.

Malware protection plan UNSUPPORTED tag

Add your answer

Relevant content