Security operations wants intelligent threat detection findings acr…

Question

Security operations wants intelligent threat detection findings across AWS accounts used by the city. Which service is designed for that purpose at Cloud Practitioner depth?

Accepted Answer

Amazon GuardDuty, which provides intelligent threat detection for AWS accounts and workloads. — When you want a security guard that watches for weird account and network behavior, pick GuardDuty — not a compliance PDF shelf or a migration suitcase. GuardDuty is the threat detection service. Artifact, S3 versioning, and Snowball are answering different questions.

Answer

AWS Artifact for continuous malware signature updates on EC2.

Answer

Amazon S3 for generating network intrusion findings from bucket versioning alone.

Answer

AWS Snowball for streaming threat detections from Regions to tape.

Security operations wants intelligent threat detection findings across AWS accounts used by the city. Which service is designed for that purpose at Cloud Practitioner depth?

Short Explanation

Full Explanation