Documentation

Amazon GuardDuty user guide

Learn how to set up and use GuardDuty, about foundational data sources that GuardDuty monitors, and about optional protection plans and features.

HTML | PDF

GuardDuty API reference

This document describes the API operations for GuardDuty and provides sample requests, responses, and errors for the supported web services protocols.

HTML | PDF

GuardDuty finding types

Learn about findings generated when GuardDuty detects unexpected and potentially malicious activity in your AWS environment.

HTML | PDF

AWS Command Line Interface

Learn about the AWS Command Line Interface (AWS CLI), which allows you to interact with AWS services using commands in your command-line shell.

HTML | PDF

AWS service integrations with GuardDuty

Learn how ingesting data from other AWS security services allow you to view GuardDuty findings in new ways.

HTML | PDF

Whitepapers

Amazon GuardDuty Security Review: PCI DSS Compliance

This whitepaper from Foregenix documents their assessment of GuardDuty’s effectiveness to address Payment Card Industry Data Security Standard (PCI DSS) for meeting intrusion detection requirements.

Security Pillar - AWS Well-Architected Framework

The security pillar of the AWS Well-Architected Framework describes how to take advantage of cloud technologies to protect data, systems, and assets in a way that can improve your security posture. 

HTML | PDF

AWS security, identity and compliance whitepapers and guides

The security pillar of the AWS Well-Architected Framework describes how to take advantage of cloud technologies to protect data, systems, and assets in a way that can improve your security posture. 

Webinars

Containers from the Couch: GuardDuty EKS Runtime Monitoring (56:55)
AWS On Air: Amazon GuardDuty RDS Protection (26:19)
AWS re:Invent 2022: Introducing Amazon GuardDuty RDS Protection (51:01)
AWS re:Invent 2022: Threat detection and incident response using cloud-native services
New AWS security services for container threat detection - AWS Online Tech Talks (51:36)
AWS re:Inforce 2022: Introducing Amazon GuardDuty Malware Protection (47:07)
AWS re:Inforce 2022: What’s new with AWS threat detection services (50:56)
AWS Summit 2022: How to layer AWS threat detection & monitoring security services (53:46)
Evolving beyond heroics for threat detection and incident response

Overview videos

What is Amazon GuardDuty Malware Protection? (1:20)

Blogs

Explore Amazon GuardDuty FAQs

Amazon GuardDuty is a threat detection service that provides you with an accurate and easy way to continuously monitor and protect their AWS accounts and workloads.

Learn more 
Sign up for a 30-day free trial

Try Amazon GuardDuty for 30-days at no cost. You will receive full access to GuardDuty features and its detection findings during the free trial.

Free trial 
Start building in the console

Get started building with Amazon GuardDuty in the AWS Console.

Sign in