Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation.
• Intelligent threat detection service (managed IDS) • Detects account compromise, instance compromise, malicious reconnaissance, and bucket compromise • Continuous monitoring for events across: • AWS CloudTrail Management Events • AWS CloudTrail S3 Data Events • Amazon VPC Flow Logs • DNS Logs