aws:guardduty
Amazon GuardDuty findings
A detection product, not a raw log
- Host type
- AWS
- Tier, as a whole
- Recommended
- Cost class
- Paid service
- Techniques
- 0
- Rules listed
- 4
- Events
- 0
Why this tier
OMB M-26-14 A6 (Security tooling alerts; our analysis)
Licensing
- License or service
- Amazon GuardDuty
- What is free
- 30-day trial
- What costs
- Per million CloudTrail mgmt events; per GB VPC Flow/DNS logs; optional plans (S3/EKS/Runtime/Malware/RDS/Lambda)
- Notes
- Analyzes these sources independently of whether you enable them
- Vendor page
- https://aws.amazon.com/guardduty/pricing
- As read on
- 2026-11-01
A vendor statement as read on the date shown; the cost class is the durable part.
Standards and guidance naming this source
| Requirement | Relation | Basis |
|---|---|---|
| OMB M-26-14: Security tooling alerts | Supports an activity | our analysis: GuardDuty findings |
Techniques
No ATT&CK analytic names this source.
Rules
Events
No event-level rows: this source is tiered as a whole.