Posted On: Mar 16, 2023
Amazon GuardDuty broadens threat detection coverage to help you protect your data residing in Amazon Aurora databases. GuardDuty RDS Protection is designed to profile and monitor access activity to Aurora databases in your AWS account without impacting database performance. Using tailored machine learning models and integrated threat intelligence, GuardDuty can detect potential threats such as high severity brute force attacks, suspicious logins, and access by known threat actors.
Current GuardDuty users, including those in the public preview, can activate RDS protection with a single step in the GuardDuty console and, leveraging AWS Organizations, across all accounts in an organization. If you’re new to GuardDuty, you will have RDS Protection turned on by default. All GuardDuty users can try RDS Protection at no cost with a 30-day free trial. For a full list of Regions where RDS Protection is available, visit Region-specific feature availability.
Amazon GuardDuty is a threat detection service that continuously monitors for malicious behavior to help protect your AWS resources, including your AWS accounts, access keys, EC2 instances, EKS clusters, data stored in S3, and now Aurora databases. Aurora is a fully managed MySQL and PostgreSQL-compatible relational database built for the cloud as part of the Amazon Relational Database Services (RDS).
To get started:
- Try RDS Protection at no cost for 30 days on the AWS Free Tier
- Refer to the GuardDuty RDS Protection documentation to learn about the new finding types available
- Get programmatic updates on new features and threat detections with the Amazon GuardDuty SNS topic