Vendor services misconfigurations

Aws Guard Duty Should Be Enabled

Platform(s)
Compliance Frameworks
  • AWS Foundational Security Best Practices Controls
  • ,
  • cis_8
  • ,
  • GDPR
  • ,
  • HITRUST

Description

AWS GuardDuty is a managed threat detection service that continuously monitors your VPC flow logs, AWS CloudTrail event logs and DNS logs for malicious or unauthorized behavior. This service is not supported in the following Regions: Africa (Cape Town), China (Beijing), China (Ningxia), Europe (Milan), Middle East (Bahrain), AWS GovCloud (US-East). It was detected that the Cloud Account - {CloudAccount} is disabled in all available regions.