Posted On: Mar 16, 2023

Amazon GuardDuty broadens threat detection coverage to help you protect your data residing in Amazon Aurora databases. GuardDuty RDS Protection is designed to profile and monitor access activity to Aurora databases in your AWS account without impacting database performance. Using tailored machine learning models and integrated threat intelligence, GuardDuty can detect potential threats such as high severity brute force attacks, suspicious logins, and access by known threat actors.

Current GuardDuty users, including those in the public preview, can activate RDS protection with a single step in the GuardDuty console and, leveraging AWS Organizations, across all accounts in an organization. If you’re new to GuardDuty, you will have RDS Protection turned on by default. All GuardDuty users can try RDS Protection at no cost with a 30-day free trial. For a full list of Regions where RDS Protection is available, visit Region-specific feature availability.

Amazon GuardDuty is a threat detection service that continuously monitors for malicious behavior to help protect your AWS resources, including your AWS accounts, access keys, EC2 instances, EKS clusters, data stored in S3, and now Aurora databases. Aurora is a fully managed MySQL and PostgreSQL-compatible relational database built for the cloud as part of the Amazon Relational Database Services (RDS).

To get started: