Tune Rules that have unsupported versions in min_stack_version (#5079)

shashank-elastic · web-flow · commit c6406e97c2d2 · 2025-09-10T19:43:28.000+05:30
diff --git a/rules/integrations/aws/privilege_escalation_iam_customer_managed_policy_attached_to_role.toml b/rules/integrations/aws/privilege_escalation_iam_customer_managed_policy_attached_to_role.toml
@@ -2,9 +2,7 @@
 creation_date = "2024/11/04"
 integration = ["aws"]
 maturity = "production"
-min_stack_comments = "New fields added: actor.entity.id and target.entity.id"
-min_stack_version = "8.16.5"
-updated_date = "2025/09/08"
+updated_date = "2025/10/10"
 
 [rule]
 author = ["Elastic"]
diff --git a/rules/integrations/aws/privilege_escalation_iam_update_assume_role_policy.toml b/rules/integrations/aws/privilege_escalation_iam_update_assume_role_policy.toml
@@ -2,9 +2,7 @@
 creation_date = "2020/07/06"
 integration = ["aws"]
 maturity = "production"
-min_stack_comments = "New fields added: actor.entity.id and target.entity.id"
-min_stack_version = "8.16.5"
-updated_date = "2025/07/10"
+updated_date = "2025/10/10"
 
 [rule]
 author = ["Elastic"]
diff --git a/rules/integrations/azure/credential_access_entra_id_brute_force_activity.toml b/rules/integrations/azure/credential_access_entra_id_brute_force_activity.toml
@@ -2,9 +2,7 @@
 creation_date = "2024/09/06"
 integration = ["azure"]
 maturity = "production"
-min_stack_comments = "Elastic ESQL values aggregation is more performant in 8.16.5 and above."
-min_stack_version = "8.17.0"
-updated_date = "2025/07/16"
+updated_date = "2025/10/10"
 
 [rule]
 author = ["Elastic"]
