Amazon Web Services
This video demonstrates how to enable and use Amazon GuardDuty EKS Runtime Monitoring, a new feature that enhances security for Amazon EKS clusters. The lightweight agent collects runtime data from containers, sending it to GuardDuty for analysis to detect malicious activities and potential compromises. The walkthrough covers enabling the feature across an AWS organization, managing the agent, and investigating security findings. GuardDuty EKS Runtime Monitoring provides comprehensive protection for Kubernetes deployments, monitoring events at various layers including the management plane, control plane, and system-level events within containers.