Now offering Amazon GuardDuty EC2 Runtime Monitoring

AWS is pleased to announce today the general availability of Amazon GuardDuty EC2 Runtime Monitoring

[{"selector":"#anim-0b3c7922-58e9-407d-be2d-8ac9b1fea97e","keyframes":{"transform":["rotate(-540deg) scale(0.1)","none"],"opacity":[0,1]},"delay":0,"duration":1000,"fill":"both","iterations":1}] [{"selector":"#anim-b37d1136-e6f2-4310-a040-3e83ecb06069 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-36.069749131772724%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

AWS Organisations simplifies security by centrally enabling runtime threat detection for accounts and workloads

[{"selector":"#anim-5e0302a7-d065-4930-84f5-8762ab7339b2","keyframes":{"transform":["rotate(-540deg) scale(0.1)","none"],"opacity":[0,1]},"delay":0,"duration":1000,"fill":"both","iterations":1}] [{"selector":"#anim-72b651ba-376e-4a75-abe0-bfd0d24ae685 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-35.937499914669296%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

The number of days remaining in the free trial is shown on the GuardDuty interface

[{"selector":"#anim-c5f2a6fd-9f56-4780-bd02-c14086c8e107","keyframes":{"transform":["translate3d(-139%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-13fe8a49-75d6-41f7-aea5-cdd2e90d527e","keyframes":{"transform":["rotateZ(-180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}] [{"selector":"#anim-06a029db-1921-4f66-ad6d-ffbf32c331b4 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-28.93339755556636%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

The GuardDuty security agent may be installed manually or automatically

[{"selector":"#anim-1bbd6219-213c-4e28-9429-c6264854583b","keyframes":{"transform":["rotate(-540deg) scale(0.1)","none"],"opacity":[0,1]},"delay":0,"duration":1000,"fill":"both","iterations":1}] [{"selector":"#anim-4b6961b9-5650-4279-b393-aa7a02cff7fa [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.59158406491817%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

GuardDuty keeps an eye on AWS CloudTrail, VPC traffic, and DNS logs related to the EC2 instance in order to continue providing threat detection services

[{"selector":"#anim-11bbcae8-a741-4fea-a1c7-f6c0f12205f1","keyframes":{"transform":["translate3d(125.09092%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-df496dcf-e3d3-4aa5-8d72-2a624a608102","keyframes":{"transform":["rotateZ(180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}] [{"selector":"#anim-d3d02a78-d77c-4ff2-bd5b-a9b34f832719 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-35.937499914669296%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

The results table may be filtered using the filter bar according to certain parameters, such the Resource type of Instance

[{"selector":"#anim-6627d3bb-6494-4c2c-89e5-cadc1d71a3a3","keyframes":{"transform":["translate3d(147.13655%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-35c9a6e2-ce46-4db4-8f56-f2bd3c9a83df","keyframes":{"transform":["rotateZ(180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}] [{"selector":"#anim-b920e8ba-f5d6-4d04-be5b-657bf932e54c [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-21.874999829338588%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

AWS Security Hub and Amazon Detective are two more AWS security services that can be integrated with GuardDuty EC2 Runtime Monitoring

[{"selector":"#anim-2ef616d6-28af-494c-86c8-bfe142398de3","keyframes":{"transform":["scale(1)","scale(1.5)","scale(0.95)","scale(1)"],"offset":[0,0.33,0.66,1]},"delay":0,"duration":1450,"easing":"ease-in-out","fill":"both","iterations":1}] [{"selector":"#anim-386107ad-9357-420e-bff0-2e9859ad1ec4 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.249999904429615%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]