1 year ago

https://aws.amazon.com/polly/ Since Amazon GuardDuty https://aws.amazon.com/blogs/aws/amazon-guardduty-continuous-security-monitoring-threat-detection/, GuardDuty has been capable of analyzing tens of billions of events per minute across multiple AWS data sources, such as https://aws.amazon.com/cloudtrail event logs, https://aws.amazon.com/vpc (Amazon VPC) Flow Logs, and DNS query logs, https://aws.amazon.com/s3 (Amazon S3) data plane events, https://aws.amazon.com/eks (Amazon EKS) audit logs, and https://aws.amazon.com/rds (Amazon RDS) login events to protect your AWS accounts and resources. GuardDuty combines machine learning (ML), anomaly detection, network monitoring, and malicious file discovery using various AWS data sources.

Today, we are announcing the general availability of Amazon GuardDuty EKS Runtime Monitoring to detect runtime threats from over 30 security findings to protect your EKS clusters.

When you disable EKS Runtime Monitoring, GuardDuty immediately stops monitoring and analyzing the runtime-activity events for all the existing EKS clusters.

Now, you can install the Amazon GuardDuty EKS Runtime Monitoring add-on for your EKS clusters.