Amazon Detective

Analyze and visualize security data to investigate potential security issues

What is Amazon Detective?

Amazon Detective automatically collects log data from your AWS resources and uses machine learning (ML), statistical analysis, and graph theory to build a dataset that you can use to conduct more efficient security investigations.

Benefits of Amazon Detective

Determine potential security issues through a unified view of user and resource interactions.
Save time and effort with graph models that automatically summarize security-related relationships running on AWS.
Investigate and respond to security findings with streamlined visualizations.
Accelerate security investigations with generative AI insights to more quickly comprehend threats

Use cases

Verify or disprove suspicious findings by investigating AWS Identity and Access Management (IAM) roles, users, IP addresses, and AWS accounts.

Learn more about threat verification

Determine the extent of malicious activity, its impact, and the underlying cause by analyzing relevant historical activities for patterns.

Learn more about investigating activity

Focus on specific resources, such as Amazon Elastic Compute Cloud (EC2) instances, and review detailed visualizations of associated activities.

Learn more about discovering threats

Analyze, summarize, and more rapidly comprehend threats for security investigations.

Learn more about threats


Explore more of AWS