Amazon Guarduty Flashcards
1
Q
What does Amazon GuardDuty do?
A
Monitors your AWS environment for suspicious activity.
Detects unauthorized behavior, like unusual API calls or unauthorized access.
Example: Detects unauthorized access attempts to your S3 buckets.
2
Q
How does Amazon GuardDuty work?
A
Uses machine learning and threat intelligence to detect potential threats.
Analyzes logs from services like CloudTrail, VPC Flow Logs, and DNS queries.
No additional information.
3
Q
Why use Amazon GuardDuty?
A
Provides real-time threat detection without needing to install software.
Helps protect AWS resources from attackers or misconfigurations.
No additional information.
