Suspicious activity

S3 bucket with Discovery:S3/AnomalousBehavior GuardDuty Alert Found

Risk Level

Informational (4)



An API commonly used to discover S3 objects was invoked in an anomalous way.
  • Recommended Mitigation

    Harden the bucket's permissions and restrict malicious access by removing permissions for the IAM entity which invoked the API call.