Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts, workloads, and data stored in Amazon S3.
This integration enables you to:
- Create an AWS GuardDuty detector on the integration instance specified AWS account.
- Retrieve, update, or delete Amazon GuardDuty detectors.
- Create, retrieve, update, or delete a list of IP addresses that are trusted for secure communication with AWS infrastructure and applications.
- Create, retrieve, or delete a set of known malicious IP addresses.
- Retrieve lists or descriptions of Amazon GuardDuty findings (a potential security issue detected within your network).
- Archive Amazon GuardDuty findings.
- Retrieve a description of the Amazon GuardDuty members.