AWS - Enabling additional GuardDuty protection plans to AWS accounts provisioned before March 2025
Posted: 2025-09-05 11:00:08 Expiration: 2025-09-22 11:00:08
The Cloud Team is updating GuardDuty settings to retroactively enable all six protection plans for existing AWS accounts
What’s Changing
All AWS accounts created in the last 7 months have had the following GuardDuty protection plans automatically enabled. We are now enabling them for older accounts to ensure consistent coverage.
Protection Plans Being Enabled
-
S3 Protection
-
EKS Audit Log Monitoring
-
Runtime Monitoring (for EC2, EKS, Fargate)
-
Malware Protection for EC2
-
RDS Login Event Monitoring
-
Lambda Network Activity Monitoring
Why This Matters
This ensures all AWS accounts benefit from the same level of threat detection across key services.
More Information
For details, see the AWS documentation:
https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html
-- Public Cloud: Brandon Erkamaa