Amazon GuardDuty
Amazon GuardDuty is an intelligent threat detection service that continuously monitors your AWS accounts, workloads, and data for malicious activity. It uses machine learning, anomaly detection, and integrated threat intelligence to identify and prioritize potential threats to your AWS environment.
Amazon GuardDuty publishes 4 APIs on the APIs.io network, including Admin API, Detector API, Invitation API, and 1 more. Tagged areas include Anomaly Detection, Compliance, Machine Learning, Monitoring, and Security.
The Amazon GuardDuty catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.
Amazon GuardDuty’s developer surface includes authentication, developer portal, documentation, support, engineering blog, developer console, signup flow, and 12 more developer resources.
Kin Score
APIs 4
Individual APIs this provider publishes, each with its own machine-readable definition.
Amazon GuardDuty Admin API
The Admin API from Amazon GuardDuty — 3 operation(s) for admin.
Amazon GuardDuty Detector API
The Detector API from Amazon GuardDuty — 37 operation(s) for detector.
Amazon GuardDuty Invitation API
The Invitation API from Amazon GuardDuty — 4 operation(s) for invitation.
Amazon GuardDuty Tags API
The Tags API from Amazon GuardDuty — 2 operation(s) for tags.
Postman Collections 4
Ready-to-run Postman collections for exercising this provider's APIs.
Amazon GuardDuty Admin API
POSTMANOpen Collections 1
Open, tool-agnostic API collections (OpenAPI-derived and Bruno).
Amazon GuardDuty
OPEN COLLECTIONPricing Plans 1
Published pricing tiers and plan structures.
Rate Limits 1
Documented rate limits and quota policies.
Amazon Guardduty Rate Limits
RATE LIMITSFinOps 1
Cost, billing, and metering signals for API financial operations.
Amazon Guardduty Finops
FINOPSFeatures 6
Notable capabilities this provider offers.
Intelligent Threat Detection
Uses ML and anomaly detection to identify threats without manual configuration or rule management.
Integrated Threat Intelligence
Incorporates curated threat intelligence feeds from AWS, CrowdStrike, and Proofpoint for enhanced detection.
Multi-Account Support
Monitor all accounts in an AWS Organization from a central administrator account.
Continuous Monitoring
Analyzes CloudTrail, VPC Flow Logs, DNS logs, and S3 access logs 24/7 without performance impact.
Finding Prioritization
Automatically prioritizes findings by severity (Low, Medium, High) for efficient response.
Malware Protection
Scans EC2 instance volumes and S3 objects for malware and known threats.
Semantic Vocabularies 1
JSON-LD contexts and semantic vocabularies used across these APIs.
Amazon Guardduty Context
JSON-LDSpectral Rules 2
Spectral governance rulesets for linting and validating these APIs.
Amazon GuardDuty API Rules
SPECTRALAmazon GuardDuty API Rules
SPECTRALJSON Schema 439
Standalone JSON Schema definitions for this provider's data models.
Amazon GuardDuty Finding
JSON SCHEMAAcceptAdministratorInvitationRequest
JSON SCHEMAAcceptAdministratorInvitationResponse
JSON SCHEMAAcceptInvitationRequest
JSON SCHEMAAcceptInvitationResponse
JSON SCHEMAAccessControlList
JSON SCHEMAAccessKeyDetails
JSON SCHEMAAccountDetail
JSON SCHEMAAccountDetails
JSON SCHEMAAccountFreeTrialInfo
JSON SCHEMAAccountFreeTrialInfos
JSON SCHEMAAccountId
JSON SCHEMAAccountIds
JSON SCHEMAAccountLevelPermissions
JSON SCHEMAAction
JSON SCHEMAAddonDetails
JSON SCHEMAAdminAccount
JSON SCHEMAAdminAccounts
JSON SCHEMAAdminStatus
JSON SCHEMAAdministrator
JSON SCHEMAAffectedResources
JSON SCHEMAArchiveFindingsRequest
JSON SCHEMAArchiveFindingsResponse
JSON SCHEMAAutoEnableMembers
JSON SCHEMAAwsApiCallAction
JSON SCHEMABadRequestException
JSON SCHEMABlockPublicAccess
JSON SCHEMABoolean
JSON SCHEMABucketLevelPermissions
JSON SCHEMABucketPolicy
JSON SCHEMACity
JSON SCHEMAClientToken
JSON SCHEMACloudTrailConfigurationResult
JSON SCHEMACondition
JSON SCHEMAContainer
JSON SCHEMAContainers
JSON SCHEMACountByCoverageStatus
JSON SCHEMACountByResourceType
JSON SCHEMACountBySeverity
JSON SCHEMACountry
JSON SCHEMACoverageEksClusterDetails
JSON SCHEMACoverageFilterCondition
JSON SCHEMACoverageFilterCriteria
JSON SCHEMACoverageFilterCriterionKey
JSON SCHEMACoverageFilterCriterionList
JSON SCHEMACoverageFilterCriterion
JSON SCHEMACoverageResourceDetails
JSON SCHEMACoverageResource
JSON SCHEMACoverageResources
JSON SCHEMACoverageSortCriteria
JSON SCHEMACoverageSortKey
JSON SCHEMACoverageStatistics
JSON SCHEMACoverageStatisticsTypeList
JSON SCHEMACoverageStatisticsType
JSON SCHEMACoverageStatus
JSON SCHEMACreateDetectorRequest
JSON SCHEMACreateDetectorResponse
JSON SCHEMACreateFilterRequest
JSON SCHEMACreateFilterResponse
JSON SCHEMACreateIPSetRequest
JSON SCHEMACreateIPSetResponse
JSON SCHEMACreateMembersRequest
JSON SCHEMACreateMembersResponse
JSON SCHEMACreatePublishingDestinationRequest
JSON SCHEMACreatePublishingDestinationResponse
JSON SCHEMACreateSampleFindingsRequest
JSON SCHEMACreateSampleFindingsResponse
JSON SCHEMACreateThreatIntelSetRequest
JSON SCHEMACreateThreatIntelSetResponse
JSON SCHEMACriterionKey
JSON SCHEMACriterion
JSON SCHEMADataSourceConfigurationsResult
JSON SCHEMADataSourceConfigurations
JSON SCHEMADataSourceFreeTrial
JSON SCHEMADataSourceList
JSON SCHEMADataSource
JSON SCHEMADataSourceStatus
JSON SCHEMADataSourcesFreeTrial
JSON SCHEMADeclineInvitationsRequest
JSON SCHEMADeclineInvitationsResponse
JSON SCHEMADefaultServerSideEncryption
JSON SCHEMADeleteDetectorRequest
JSON SCHEMADeleteDetectorResponse
JSON SCHEMADeleteFilterRequest
JSON SCHEMADeleteFilterResponse
JSON SCHEMADeleteInvitationsRequest
JSON SCHEMADeleteInvitationsResponse
JSON SCHEMADeleteIPSetRequest
JSON SCHEMADeleteIPSetResponse
JSON SCHEMADeleteMembersRequest
JSON SCHEMADeleteMembersResponse
JSON SCHEMADeletePublishingDestinationRequest
JSON SCHEMADeletePublishingDestinationResponse
JSON SCHEMADeleteThreatIntelSetRequest
JSON SCHEMADeleteThreatIntelSetResponse
JSON SCHEMADescribeMalwareScansRequest
JSON SCHEMADescribeMalwareScansResponse
JSON SCHEMADescribeOrganizationConfigurationRequest
JSON SCHEMADescribeOrganizationConfigurationResponse
JSON SCHEMADescribePublishingDestinationRequest
JSON SCHEMADescribePublishingDestinationResponse
JSON SCHEMADestinationProperties
JSON SCHEMADestination
JSON SCHEMADestinationType
JSON SCHEMADestinations
JSON SCHEMADetectorAdditionalConfigurationResult
JSON SCHEMADetectorAdditionalConfigurationResults
JSON SCHEMADetectorAdditionalConfiguration
JSON SCHEMADetectorAdditionalConfigurations
JSON SCHEMADetectorFeatureConfigurationResult
JSON SCHEMADetectorFeatureConfiguration
JSON SCHEMADetectorFeatureConfigurationsResults
JSON SCHEMADetectorFeatureConfigurations
JSON SCHEMADetectorFeatureResult
JSON SCHEMADetectorFeature
JSON SCHEMADetectorId
JSON SCHEMADetectorIds
JSON SCHEMADetectorStatus
JSON SCHEMADisableOrganizationAdminAccountRequest
JSON SCHEMADisableOrganizationAdminAccountResponse
JSON SCHEMADisassociateFromAdministratorAccountRequest
JSON SCHEMADisassociateFromAdministratorAccountResponse
JSON SCHEMADisassociateFromMasterAccountRequest
JSON SCHEMADisassociateFromMasterAccountResponse
JSON SCHEMADisassociateMembersRequest
JSON SCHEMADisassociateMembersResponse
JSON SCHEMADNSLogsConfigurationResult
JSON SCHEMADnsRequestAction
JSON SCHEMADomainDetails
JSON SCHEMADouble
JSON SCHEMAEbsSnapshotPreservation
JSON SCHEMAEbsVolumeDetails
JSON SCHEMAEbsVolumeScanDetails
JSON SCHEMAEbsVolumesResult
JSON SCHEMAEcsClusterDetails
JSON SCHEMAEcsTaskDetails
JSON SCHEMAEksClusterDetails
JSON SCHEMAEnableOrganizationAdminAccountRequest
JSON SCHEMAEnableOrganizationAdminAccountResponse
JSON SCHEMAEq
JSON SCHEMAEquals
JSON SCHEMAEvidence
JSON SCHEMAFeatureAdditionalConfiguration
JSON SCHEMAFeatureStatus
JSON SCHEMAFeedback
JSON SCHEMAFilePaths
JSON SCHEMAFilterAction
JSON SCHEMAFilterCondition
JSON SCHEMAFilterCriteria
JSON SCHEMAFilterCriterionList
JSON SCHEMAFilterCriterion
JSON SCHEMAFilterDescription
JSON SCHEMAFilterName
JSON SCHEMAFilterNames
JSON SCHEMAFilterRank
JSON SCHEMAFindingCriteria
JSON SCHEMAFindingId
JSON SCHEMAFindingIds
JSON SCHEMAFindingPublishingFrequency
JSON SCHEMAFinding
JSON SCHEMAFindingStatisticType
JSON SCHEMAFindingStatisticTypes
JSON SCHEMAFindingStatistics
JSON SCHEMAFindingType
JSON SCHEMAFindingTypes
JSON SCHEMAFindings
JSON SCHEMAFlagsList
JSON SCHEMAFlowLogsConfigurationResult
JSON SCHEMAFreeTrialFeatureConfigurationResult
JSON SCHEMAFreeTrialFeatureConfigurationsResults
JSON SCHEMAFreeTrialFeatureResult
JSON SCHEMAGeoLocation
JSON SCHEMAGetAdministratorAccountRequest
JSON SCHEMAGetAdministratorAccountResponse
JSON SCHEMAGetCoverageStatisticsRequest
JSON SCHEMAGetCoverageStatisticsResponse
JSON SCHEMAGetDetectorRequest
JSON SCHEMAGetDetectorResponse
JSON SCHEMAGetFilterRequest
JSON SCHEMAGetFilterResponse
JSON SCHEMAGetFindingsRequest
JSON SCHEMAGetFindingsResponse
JSON SCHEMAGetFindingsStatisticsRequest
JSON SCHEMAGetFindingsStatisticsResponse
JSON SCHEMAGetInvitationsCountRequest
JSON SCHEMAGetInvitationsCountResponse
JSON SCHEMAGetIPSetRequest
JSON SCHEMAGetIPSetResponse
JSON SCHEMAGetMalwareScanSettingsRequest
JSON SCHEMAGetMalwareScanSettingsResponse
JSON SCHEMAGetMasterAccountRequest
JSON SCHEMAGetMasterAccountResponse
JSON SCHEMAGetMemberDetectorsRequest
JSON SCHEMAGetMemberDetectorsResponse
JSON SCHEMAGetMembersRequest
JSON SCHEMAGetMembersResponse
JSON SCHEMAGetRemainingFreeTrialDaysRequest
JSON SCHEMAGetRemainingFreeTrialDaysResponse
JSON SCHEMAGetThreatIntelSetRequest
JSON SCHEMAGetThreatIntelSetResponse
JSON SCHEMAGetUsageStatisticsRequest
JSON SCHEMAGetUsageStatisticsResponse
JSON SCHEMAGroups
JSON SCHEMAGuardDutyArn
JSON SCHEMAHighestSeverityThreatDetails
JSON SCHEMAHostPath
JSON SCHEMAIamInstanceProfile
JSON SCHEMAInstanceArn
JSON SCHEMAInstanceDetails
JSON SCHEMAInteger
JSON SCHEMAIntegerValueWithMax
JSON SCHEMAInternalServerErrorException
JSON SCHEMAInvitation
JSON SCHEMAInvitations
JSON SCHEMAInviteMembersRequest
JSON SCHEMAInviteMembersResponse
JSON SCHEMAIpSetFormat
JSON SCHEMAIpSetIds
JSON SCHEMAIpSetStatus
JSON SCHEMAIpv6Addresses
JSON SCHEMAKubernetesApiCallAction
JSON SCHEMAKubernetesAuditLogsConfigurationResult
JSON SCHEMAKubernetesAuditLogsConfiguration
JSON SCHEMAKubernetesConfigurationResult
JSON SCHEMAKubernetesConfiguration
JSON SCHEMAKubernetesDataSourceFreeTrial
JSON SCHEMAKubernetesDetails
JSON SCHEMAKubernetesUserDetails
JSON SCHEMAKubernetesWorkloadDetails
JSON SCHEMALambdaDetails
JSON SCHEMALineageObject
JSON SCHEMALineage
JSON SCHEMAListCoverageRequest
JSON SCHEMAListCoverageResponse
JSON SCHEMAListDetectorsRequest
JSON SCHEMAListDetectorsResponse
JSON SCHEMAListFiltersRequest
JSON SCHEMAListFiltersResponse
JSON SCHEMAListFindingsRequest
JSON SCHEMAListFindingsResponse
JSON SCHEMAListInvitationsRequest
JSON SCHEMAListInvitationsResponse
JSON SCHEMAListIPSetsRequest
JSON SCHEMAListIPSetsResponse
JSON SCHEMAListMembersRequest
JSON SCHEMAListMembersResponse
JSON SCHEMAListOrganizationAdminAccountsRequest
JSON SCHEMAListOrganizationAdminAccountsResponse
JSON SCHEMAListPublishingDestinationsRequest
JSON SCHEMAListPublishingDestinationsResponse
JSON SCHEMAListTagsForResourceRequest
JSON SCHEMAListTagsForResourceResponse
JSON SCHEMAListThreatIntelSetsRequest
JSON SCHEMAListThreatIntelSetsResponse
JSON SCHEMALocalIpDetails
JSON SCHEMALocalPortDetails
JSON SCHEMALocation
JSON SCHEMALoginAttribute
JSON SCHEMALoginAttributes
JSON SCHEMALong
JSON SCHEMALongValue
JSON SCHEMAMalwareProtectionConfigurationResult
JSON SCHEMAMalwareProtectionConfiguration
JSON SCHEMAMalwareProtectionDataSourceFreeTrial
JSON SCHEMAMapEquals
JSON SCHEMAMaster
JSON SCHEMAMaxResults
JSON SCHEMAMemberAdditionalConfigurationResult
JSON SCHEMAMemberAdditionalConfigurationResults
JSON SCHEMAMemberAdditionalConfiguration
JSON SCHEMAMemberAdditionalConfigurations
JSON SCHEMAMemberDataSourceConfiguration
JSON SCHEMAMemberDataSourceConfigurations
JSON SCHEMAMemberFeaturesConfigurationResult
JSON SCHEMAMemberFeaturesConfiguration
JSON SCHEMAMemberFeaturesConfigurationsResults
JSON SCHEMAMemberFeaturesConfigurations
JSON SCHEMAMember
JSON SCHEMAMembers
JSON SCHEMAMemoryRegionsList
JSON SCHEMAName
JSON SCHEMANeq
JSON SCHEMANetworkConnectionAction
JSON SCHEMANetworkInterface
JSON SCHEMANetworkInterfaces
JSON SCHEMANonEmptyString
JSON SCHEMANotEquals
JSON SCHEMAOrderBy
JSON SCHEMAOrgFeatureAdditionalConfiguration
JSON SCHEMAOrgFeature
JSON SCHEMAOrgFeatureStatus
JSON SCHEMAOrganizationAdditionalConfigurationResult
JSON SCHEMAOrganizationAdditionalConfigurationResults
JSON SCHEMAOrganizationAdditionalConfiguration
JSON SCHEMAOrganizationAdditionalConfigurations
JSON SCHEMAOrganizationDataSourceConfigurationsResult
JSON SCHEMAOrganizationDataSourceConfigurations
JSON SCHEMAOrganizationEbsVolumesResult
JSON SCHEMAOrganizationEbsVolumes
JSON SCHEMAOrganizationFeatureConfigurationResult
JSON SCHEMAOrganizationFeatureConfiguration
JSON SCHEMAOrganizationFeaturesConfigurationsResults
JSON SCHEMAOrganizationFeaturesConfigurations
JSON SCHEMAOrganizationKubernetesAuditLogsConfiguration
JSON SCHEMAOrganizationKubernetesConfigurationResult
JSON SCHEMAOrganizationKubernetesConfiguration
JSON SCHEMAOrganizationMalwareProtectionConfiguration
JSON SCHEMAOrganizationS3LogsConfigurationResult
JSON SCHEMAOrganizationS3LogsConfiguration
JSON SCHEMAOrganizationScanEc2InstanceWithFindings
JSON SCHEMAOrganization
JSON SCHEMAOwner
JSON SCHEMAPermissionConfiguration
JSON SCHEMAPortProbeAction
JSON SCHEMAPortProbeDetail
JSON SCHEMAPortProbeDetails
JSON SCHEMAPositiveLong
JSON SCHEMAPrivateIpAddressDetails
JSON SCHEMAPrivateIpAddresses
JSON SCHEMAProcessDetails
JSON SCHEMAProductCode
JSON SCHEMAProductCodes
JSON SCHEMAPublicAccess
JSON SCHEMAPublishingStatus
JSON SCHEMARdsDbInstanceDetails
JSON SCHEMARdsDbUserDetails
JSON SCHEMARdsLoginAttemptAction
JSON SCHEMARemoteAccountDetails
JSON SCHEMARemoteIpDetails
JSON SCHEMARemotePortDetails
JSON SCHEMAResourceDetails
JSON SCHEMAResourceList
JSON SCHEMAResource
JSON SCHEMAResourceType
JSON SCHEMARuntimeContext
JSON SCHEMARuntimeDetails
JSON SCHEMAS3BucketDetail
JSON SCHEMAS3BucketDetails
JSON SCHEMAS3LogsConfigurationResult
JSON SCHEMAS3LogsConfiguration
JSON SCHEMAScanConditionPair
JSON SCHEMAScanCondition
JSON SCHEMAScanCriterionKey
JSON SCHEMAScanCriterion
JSON SCHEMAScanDetections
JSON SCHEMAScanEc2InstanceWithFindingsResult
JSON SCHEMAScanEc2InstanceWithFindings
JSON SCHEMAScanFilePath
JSON SCHEMAScanResourceCriteria
JSON SCHEMAScanResultDetails
JSON SCHEMAScanResult
JSON SCHEMAScan
JSON SCHEMAScanStatus
JSON SCHEMAScanThreatName
JSON SCHEMAScanThreatNames
JSON SCHEMAScannedItemCount
JSON SCHEMAScans
JSON SCHEMASecurityContext
JSON SCHEMASecurityGroup
JSON SCHEMASecurityGroups
JSON SCHEMAServiceAdditionalInfo
JSON SCHEMAService
JSON SCHEMASortCriteria
JSON SCHEMASourceIps
JSON SCHEMASources
JSON SCHEMAStartMonitoringMembersRequest
JSON SCHEMAStartMonitoringMembersResponse
JSON SCHEMAStopMonitoringMembersRequest
JSON SCHEMAStopMonitoringMembersResponse
JSON SCHEMAString
JSON SCHEMASubnetIds
JSON SCHEMATagKeyList
JSON SCHEMATagKey
JSON SCHEMATagMap
JSON SCHEMATagResourceRequest
JSON SCHEMATagResourceResponse
JSON SCHEMATag
JSON SCHEMATagValue
JSON SCHEMATags
JSON SCHEMAThreatDetectedByName
JSON SCHEMAThreatIntelSetFormat
JSON SCHEMAThreatIntelSetIds
JSON SCHEMAThreatIntelSetStatus
JSON SCHEMAThreatIntelligenceDetail
JSON SCHEMAThreatIntelligenceDetails
JSON SCHEMAThreatNames
JSON SCHEMAThreatsDetectedItemCount
JSON SCHEMATimestamp
JSON SCHEMATotal
JSON SCHEMATriggerDetails
JSON SCHEMAUnarchiveFindingsRequest
JSON SCHEMAUnarchiveFindingsResponse
JSON SCHEMAUnprocessedAccount
JSON SCHEMAUnprocessedAccounts
JSON SCHEMAUnprocessedDataSourcesResult
JSON SCHEMAUntagResourceRequest
JSON SCHEMAUntagResourceResponse
JSON SCHEMAUpdateDetectorRequest
JSON SCHEMAUpdateDetectorResponse
JSON SCHEMAUpdateFilterRequest
JSON SCHEMAUpdateFilterResponse
JSON SCHEMAUpdateFindingsFeedbackRequest
JSON SCHEMAUpdateFindingsFeedbackResponse
JSON SCHEMAUpdateIPSetRequest
JSON SCHEMAUpdateIPSetResponse
JSON SCHEMAUpdateMalwareScanSettingsRequest
JSON SCHEMAUpdateMalwareScanSettingsResponse
JSON SCHEMAUpdateMemberDetectorsRequest
JSON SCHEMAUpdateMemberDetectorsResponse
JSON SCHEMAUpdateOrganizationConfigurationRequest
JSON SCHEMAUpdateOrganizationConfigurationResponse
JSON SCHEMAUpdatePublishingDestinationRequest
JSON SCHEMAUpdatePublishingDestinationResponse
JSON SCHEMAUpdateThreatIntelSetRequest
JSON SCHEMAUpdateThreatIntelSetResponse
JSON SCHEMAUsageAccountResultList
JSON SCHEMAUsageAccountResult
JSON SCHEMAUsageCriteria
JSON SCHEMAUsageDataSourceResultList
JSON SCHEMAUsageDataSourceResult
JSON SCHEMAUsageFeatureList
JSON SCHEMAUsageFeatureResultList
JSON SCHEMAUsageFeatureResult
JSON SCHEMAUsageFeature
JSON SCHEMAUsageResourceResultList
JSON SCHEMAUsageResourceResult
JSON SCHEMAUsageStatisticType
JSON SCHEMAUsageStatistics
JSON SCHEMAVolumeDetail
JSON SCHEMAVolumeDetails
JSON SCHEMAVolumeMount
JSON SCHEMAVolumeMounts
JSON SCHEMAVolume
JSON SCHEMAVolumes
JSON SCHEMAVpcConfig
JSON SCHEMAScroll for all 439
JSON Structure 439
JSON Structure definitions describing this provider's data shapes.
Amazon Guardduty Structure
JSON STRUCTUREGuardduty Accept Invitation Request Structure
JSON STRUCTUREGuardduty Accept Invitation Response Structure
JSON STRUCTUREGuardduty Access Control List Structure
JSON STRUCTUREGuardduty Access Key Details Structure
JSON STRUCTUREGuardduty Account Detail Structure
JSON STRUCTUREGuardduty Account Details Structure
JSON STRUCTUREGuardduty Account Free Trial Info Structure
JSON STRUCTUREGuardduty Account Free Trial Infos Structure
JSON STRUCTUREGuardduty Account Id Structure
JSON STRUCTUREGuardduty Account Ids Structure
JSON STRUCTUREGuardduty Account Level Permissions Structure
JSON STRUCTUREGuardduty Action Structure
JSON STRUCTUREGuardduty Addon Details Structure
JSON STRUCTUREGuardduty Admin Account Structure
JSON STRUCTUREGuardduty Admin Accounts Structure
JSON STRUCTUREGuardduty Admin Status Structure
JSON STRUCTUREGuardduty Administrator Structure
JSON STRUCTUREGuardduty Affected Resources Structure
JSON STRUCTUREGuardduty Archive Findings Request Structure
JSON STRUCTUREGuardduty Archive Findings Response Structure
JSON STRUCTUREGuardduty Auto Enable Members Structure
JSON STRUCTUREGuardduty Aws Api Call Action Structure
JSON STRUCTUREGuardduty Bad Request Exception Structure
JSON STRUCTUREGuardduty Block Public Access Structure
JSON STRUCTUREGuardduty Boolean Structure
JSON STRUCTUREGuardduty Bucket Level Permissions Structure
JSON STRUCTUREGuardduty Bucket Policy Structure
JSON STRUCTUREGuardduty City Structure
JSON STRUCTUREGuardduty Client Token Structure
JSON STRUCTUREGuardduty Cloud Trail Configuration Result Structure
JSON STRUCTUREGuardduty Condition Structure
JSON STRUCTUREGuardduty Container Structure
JSON STRUCTUREGuardduty Containers Structure
JSON STRUCTUREGuardduty Count By Coverage Status Structure
JSON STRUCTUREGuardduty Count By Resource Type Structure
JSON STRUCTUREGuardduty Count By Severity Structure
JSON STRUCTUREGuardduty Country Structure
JSON STRUCTUREGuardduty Coverage Eks Cluster Details Structure
JSON STRUCTUREGuardduty Coverage Filter Condition Structure
JSON STRUCTUREGuardduty Coverage Filter Criteria Structure
JSON STRUCTUREGuardduty Coverage Filter Criterion Key Structure
JSON STRUCTUREGuardduty Coverage Filter Criterion List Structure
JSON STRUCTUREGuardduty Coverage Filter Criterion Structure
JSON STRUCTUREGuardduty Coverage Resource Details Structure
JSON STRUCTUREGuardduty Coverage Resource Structure
JSON STRUCTUREGuardduty Coverage Resources Structure
JSON STRUCTUREGuardduty Coverage Sort Criteria Structure
JSON STRUCTUREGuardduty Coverage Sort Key Structure
JSON STRUCTUREGuardduty Coverage Statistics Structure
JSON STRUCTUREGuardduty Coverage Statistics Type List Structure
JSON STRUCTUREGuardduty Coverage Statistics Type Structure
JSON STRUCTUREGuardduty Coverage Status Structure
JSON STRUCTUREGuardduty Create Detector Request Structure
JSON STRUCTUREGuardduty Create Detector Response Structure
JSON STRUCTUREGuardduty Create Filter Request Structure
JSON STRUCTUREGuardduty Create Filter Response Structure
JSON STRUCTUREGuardduty Create Ip Set Request Structure
JSON STRUCTUREGuardduty Create Ip Set Response Structure
JSON STRUCTUREGuardduty Create Members Request Structure
JSON STRUCTUREGuardduty Create Members Response Structure
JSON STRUCTUREGuardduty Create Sample Findings Request Structure
JSON STRUCTUREGuardduty Create Sample Findings Response Structure
JSON STRUCTUREGuardduty Create Threat Intel Set Request Structure
JSON STRUCTUREGuardduty Create Threat Intel Set Response Structure
JSON STRUCTUREGuardduty Criterion Key Structure
JSON STRUCTUREGuardduty Criterion Structure
JSON STRUCTUREGuardduty Data Source Configurations Result Structure
JSON STRUCTUREGuardduty Data Source Configurations Structure
JSON STRUCTUREGuardduty Data Source Free Trial Structure
JSON STRUCTUREGuardduty Data Source List Structure
JSON STRUCTUREGuardduty Data Source Status Structure
JSON STRUCTUREGuardduty Data Source Structure
JSON STRUCTUREGuardduty Data Sources Free Trial Structure
JSON STRUCTUREGuardduty Decline Invitations Request Structure
JSON STRUCTUREGuardduty Decline Invitations Response Structure
JSON STRUCTUREGuardduty Default Server Side Encryption Structure
JSON STRUCTUREGuardduty Delete Detector Request Structure
JSON STRUCTUREGuardduty Delete Detector Response Structure
JSON STRUCTUREGuardduty Delete Filter Request Structure
JSON STRUCTUREGuardduty Delete Filter Response Structure
JSON STRUCTUREGuardduty Delete Invitations Request Structure
JSON STRUCTUREGuardduty Delete Invitations Response Structure
JSON STRUCTUREGuardduty Delete Ip Set Request Structure
JSON STRUCTUREGuardduty Delete Ip Set Response Structure
JSON STRUCTUREGuardduty Delete Members Request Structure
JSON STRUCTUREGuardduty Delete Members Response Structure
JSON STRUCTUREGuardduty Delete Threat Intel Set Request Structure
JSON STRUCTUREGuardduty Delete Threat Intel Set Response Structure
JSON STRUCTUREGuardduty Describe Malware Scans Request Structure
JSON STRUCTUREGuardduty Describe Malware Scans Response Structure
JSON STRUCTUREGuardduty Destination Properties Structure
JSON STRUCTUREGuardduty Destination Structure
JSON STRUCTUREGuardduty Destination Type Structure
JSON STRUCTUREGuardduty Destinations Structure
JSON STRUCTUREGuardduty Detector Additional Configuration Structure
JSON STRUCTUREGuardduty Detector Additional Configurations Structure
JSON STRUCTUREGuardduty Detector Feature Configuration Structure
JSON STRUCTUREGuardduty Detector Feature Configurations Structure
JSON STRUCTUREGuardduty Detector Feature Result Structure
JSON STRUCTUREGuardduty Detector Feature Structure
JSON STRUCTUREGuardduty Detector Id Structure
JSON STRUCTUREGuardduty Detector Ids Structure
JSON STRUCTUREGuardduty Detector Status Structure
JSON STRUCTUREGuardduty Disassociate Members Request Structure
JSON STRUCTUREGuardduty Disassociate Members Response Structure
JSON STRUCTUREGuardduty Dns Logs Configuration Result Structure
JSON STRUCTUREGuardduty Dns Request Action Structure
JSON STRUCTUREGuardduty Domain Details Structure
JSON STRUCTUREGuardduty Double Structure
JSON STRUCTUREGuardduty Ebs Snapshot Preservation Structure
JSON STRUCTUREGuardduty Ebs Volume Details Structure
JSON STRUCTUREGuardduty Ebs Volume Scan Details Structure
JSON STRUCTUREGuardduty Ebs Volumes Result Structure
JSON STRUCTUREGuardduty Ecs Cluster Details Structure
JSON STRUCTUREGuardduty Ecs Task Details Structure
JSON STRUCTUREGuardduty Eks Cluster Details Structure
JSON STRUCTUREGuardduty Email Structure
JSON STRUCTUREGuardduty Eq Structure
JSON STRUCTUREGuardduty Equals Structure
JSON STRUCTUREGuardduty Evidence Structure
JSON STRUCTUREGuardduty Feature Additional Configuration Structure
JSON STRUCTUREGuardduty Feature Status Structure
JSON STRUCTUREGuardduty Feedback Structure
JSON STRUCTUREGuardduty File Paths Structure
JSON STRUCTUREGuardduty Filter Action Structure
JSON STRUCTUREGuardduty Filter Condition Structure
JSON STRUCTUREGuardduty Filter Criteria Structure
JSON STRUCTUREGuardduty Filter Criterion List Structure
JSON STRUCTUREGuardduty Filter Criterion Structure
JSON STRUCTUREGuardduty Filter Description Structure
JSON STRUCTUREGuardduty Filter Name Structure
JSON STRUCTUREGuardduty Filter Names Structure
JSON STRUCTUREGuardduty Filter Rank Structure
JSON STRUCTUREGuardduty Finding Criteria Structure
JSON STRUCTUREGuardduty Finding Id Structure
JSON STRUCTUREGuardduty Finding Ids Structure
JSON STRUCTUREGuardduty Finding Publishing Frequency Structure
JSON STRUCTUREGuardduty Finding Statistic Type Structure
JSON STRUCTUREGuardduty Finding Statistic Types Structure
JSON STRUCTUREGuardduty Finding Statistics Structure
JSON STRUCTUREGuardduty Finding Structure
JSON STRUCTUREGuardduty Finding Type Structure
JSON STRUCTUREGuardduty Finding Types Structure
JSON STRUCTUREGuardduty Findings Structure
JSON STRUCTUREGuardduty Flags List Structure
JSON STRUCTUREGuardduty Flow Logs Configuration Result Structure
JSON STRUCTUREGuardduty Free Trial Feature Result Structure
JSON STRUCTUREGuardduty Geo Location Structure
JSON STRUCTUREGuardduty Get Administrator Account Request Structure
JSON STRUCTUREGuardduty Get Administrator Account Response Structure
JSON STRUCTUREGuardduty Get Coverage Statistics Request Structure
JSON STRUCTUREGuardduty Get Coverage Statistics Response Structure
JSON STRUCTUREGuardduty Get Detector Request Structure
JSON STRUCTUREGuardduty Get Detector Response Structure
JSON STRUCTUREGuardduty Get Filter Request Structure
JSON STRUCTUREGuardduty Get Filter Response Structure
JSON STRUCTUREGuardduty Get Findings Request Structure
JSON STRUCTUREGuardduty Get Findings Response Structure
JSON STRUCTUREGuardduty Get Findings Statistics Request Structure
JSON STRUCTUREGuardduty Get Findings Statistics Response Structure
JSON STRUCTUREGuardduty Get Invitations Count Request Structure
JSON STRUCTUREGuardduty Get Invitations Count Response Structure
JSON STRUCTUREGuardduty Get Ip Set Request Structure
JSON STRUCTUREGuardduty Get Ip Set Response Structure
JSON STRUCTUREGuardduty Get Malware Scan Settings Request Structure
JSON STRUCTUREGuardduty Get Malware Scan Settings Response Structure
JSON STRUCTUREGuardduty Get Master Account Request Structure
JSON STRUCTUREGuardduty Get Master Account Response Structure
JSON STRUCTUREGuardduty Get Member Detectors Request Structure
JSON STRUCTUREGuardduty Get Member Detectors Response Structure
JSON STRUCTUREGuardduty Get Members Request Structure
JSON STRUCTUREGuardduty Get Members Response Structure
JSON STRUCTUREGuardduty Get Threat Intel Set Request Structure
JSON STRUCTUREGuardduty Get Threat Intel Set Response Structure
JSON STRUCTUREGuardduty Get Usage Statistics Request Structure
JSON STRUCTUREGuardduty Get Usage Statistics Response Structure
JSON STRUCTUREGuardduty Groups Structure
JSON STRUCTUREGuardduty Guard Duty Arn Structure
JSON STRUCTUREGuardduty Highest Severity Threat Details Structure
JSON STRUCTUREGuardduty Host Path Structure
JSON STRUCTUREGuardduty Iam Instance Profile Structure
JSON STRUCTUREGuardduty Instance Arn Structure
JSON STRUCTUREGuardduty Instance Details Structure
JSON STRUCTUREGuardduty Integer Structure
JSON STRUCTUREGuardduty Integer Value With Max Structure
JSON STRUCTUREGuardduty Internal Server Error Exception Structure
JSON STRUCTUREGuardduty Invitation Structure
JSON STRUCTUREGuardduty Invitations Structure
JSON STRUCTUREGuardduty Invite Members Request Structure
JSON STRUCTUREGuardduty Invite Members Response Structure
JSON STRUCTUREGuardduty Ip Set Format Structure
JSON STRUCTUREGuardduty Ip Set Ids Structure
JSON STRUCTUREGuardduty Ip Set Status Structure
JSON STRUCTUREGuardduty Ipv6 Addresses Structure
JSON STRUCTUREGuardduty Kubernetes Api Call Action Structure
JSON STRUCTUREGuardduty Kubernetes Audit Logs Configuration Structure
JSON STRUCTUREGuardduty Kubernetes Configuration Result Structure
JSON STRUCTUREGuardduty Kubernetes Configuration Structure
JSON STRUCTUREGuardduty Kubernetes Data Source Free Trial Structure
JSON STRUCTUREGuardduty Kubernetes Details Structure
JSON STRUCTUREGuardduty Kubernetes User Details Structure
JSON STRUCTUREGuardduty Kubernetes Workload Details Structure
JSON STRUCTUREGuardduty Lambda Details Structure
JSON STRUCTUREGuardduty Lineage Object Structure
JSON STRUCTUREGuardduty Lineage Structure
JSON STRUCTUREGuardduty List Coverage Request Structure
JSON STRUCTUREGuardduty List Coverage Response Structure
JSON STRUCTUREGuardduty List Detectors Request Structure
JSON STRUCTUREGuardduty List Detectors Response Structure
JSON STRUCTUREGuardduty List Filters Request Structure
JSON STRUCTUREGuardduty List Filters Response Structure
JSON STRUCTUREGuardduty List Findings Request Structure
JSON STRUCTUREGuardduty List Findings Response Structure
JSON STRUCTUREGuardduty List Invitations Request Structure
JSON STRUCTUREGuardduty List Invitations Response Structure
JSON STRUCTUREGuardduty List Ip Sets Request Structure
JSON STRUCTUREGuardduty List Ip Sets Response Structure
JSON STRUCTUREGuardduty List Members Request Structure
JSON STRUCTUREGuardduty List Members Response Structure
JSON STRUCTUREGuardduty List Publishing Destinations Request Structure
JSON STRUCTUREGuardduty List Tags For Resource Request Structure
JSON STRUCTUREGuardduty List Tags For Resource Response Structure
JSON STRUCTUREGuardduty List Threat Intel Sets Request Structure
JSON STRUCTUREGuardduty List Threat Intel Sets Response Structure
JSON STRUCTUREGuardduty Local Ip Details Structure
JSON STRUCTUREGuardduty Local Port Details Structure
JSON STRUCTUREGuardduty Location Structure
JSON STRUCTUREGuardduty Login Attribute Structure
JSON STRUCTUREGuardduty Login Attributes Structure
JSON STRUCTUREGuardduty Long Structure
JSON STRUCTUREGuardduty Long Value Structure
JSON STRUCTUREGuardduty Malware Protection Configuration Structure
JSON STRUCTUREGuardduty Map Equals Structure
JSON STRUCTUREGuardduty Master Structure
JSON STRUCTUREGuardduty Max Results Structure
JSON STRUCTUREGuardduty Member Additional Configuration Structure
JSON STRUCTUREGuardduty Member Additional Configurations Structure
JSON STRUCTUREGuardduty Member Data Source Configuration Structure
JSON STRUCTUREGuardduty Member Data Source Configurations Structure
JSON STRUCTUREGuardduty Member Features Configuration Result Structure
JSON STRUCTUREGuardduty Member Features Configuration Structure
JSON STRUCTUREGuardduty Member Features Configurations Structure
JSON STRUCTUREGuardduty Member Structure
JSON STRUCTUREGuardduty Members Structure
JSON STRUCTUREGuardduty Memory Regions List Structure
JSON STRUCTUREGuardduty Name Structure
JSON STRUCTUREGuardduty Neq Structure
JSON STRUCTUREGuardduty Network Connection Action Structure
JSON STRUCTUREGuardduty Network Interface Structure
JSON STRUCTUREGuardduty Network Interfaces Structure
JSON STRUCTUREGuardduty Non Empty String Structure
JSON STRUCTUREGuardduty Not Equals Structure
JSON STRUCTUREGuardduty Order By Structure
JSON STRUCTUREGuardduty Org Feature Additional Configuration Structure
JSON STRUCTUREGuardduty Org Feature Status Structure
JSON STRUCTUREGuardduty Org Feature Structure
JSON STRUCTUREGuardduty Organization Ebs Volumes Result Structure
JSON STRUCTUREGuardduty Organization Ebs Volumes Structure
JSON STRUCTUREGuardduty Organization Feature Configuration Structure
JSON STRUCTUREGuardduty Organization Features Configurations Structure
JSON STRUCTUREGuardduty Organization S3 Logs Configuration Structure
JSON STRUCTUREGuardduty Organization Structure
JSON STRUCTUREGuardduty Owner Structure
JSON STRUCTUREGuardduty Permission Configuration Structure
JSON STRUCTUREGuardduty Port Probe Action Structure
JSON STRUCTUREGuardduty Port Probe Detail Structure
JSON STRUCTUREGuardduty Port Probe Details Structure
JSON STRUCTUREGuardduty Positive Long Structure
JSON STRUCTUREGuardduty Private Ip Address Details Structure
JSON STRUCTUREGuardduty Private Ip Addresses Structure
JSON STRUCTUREGuardduty Process Details Structure
JSON STRUCTUREGuardduty Product Code Structure
JSON STRUCTUREGuardduty Product Codes Structure
JSON STRUCTUREGuardduty Public Access Structure
JSON STRUCTUREGuardduty Publishing Status Structure
JSON STRUCTUREGuardduty Rds Db Instance Details Structure
JSON STRUCTUREGuardduty Rds Db User Details Structure
JSON STRUCTUREGuardduty Rds Login Attempt Action Structure
JSON STRUCTUREGuardduty Remote Account Details Structure
JSON STRUCTUREGuardduty Remote Ip Details Structure
JSON STRUCTUREGuardduty Remote Port Details Structure
JSON STRUCTUREGuardduty Resource Details Structure
JSON STRUCTUREGuardduty Resource List Structure
JSON STRUCTUREGuardduty Resource Structure
JSON STRUCTUREGuardduty Resource Type Structure
JSON STRUCTUREGuardduty Runtime Context Structure
JSON STRUCTUREGuardduty Runtime Details Structure
JSON STRUCTUREGuardduty S3 Bucket Detail Structure
JSON STRUCTUREGuardduty S3 Bucket Details Structure
JSON STRUCTUREGuardduty S3 Logs Configuration Result Structure
JSON STRUCTUREGuardduty S3 Logs Configuration Structure
JSON STRUCTUREGuardduty Scan Condition Pair Structure
JSON STRUCTUREGuardduty Scan Condition Structure
JSON STRUCTUREGuardduty Scan Criterion Key Structure
JSON STRUCTUREGuardduty Scan Criterion Structure
JSON STRUCTUREGuardduty Scan Detections Structure
JSON STRUCTUREGuardduty Scan Ec2 Instance With Findings Structure
JSON STRUCTUREGuardduty Scan File Path Structure
JSON STRUCTUREGuardduty Scan Resource Criteria Structure
JSON STRUCTUREGuardduty Scan Result Details Structure
JSON STRUCTUREGuardduty Scan Result Structure
JSON STRUCTUREGuardduty Scan Status Structure
JSON STRUCTUREGuardduty Scan Structure
JSON STRUCTUREGuardduty Scan Threat Name Structure
JSON STRUCTUREGuardduty Scan Threat Names Structure
JSON STRUCTUREGuardduty Scanned Item Count Structure
JSON STRUCTUREGuardduty Scans Structure
JSON STRUCTUREGuardduty Security Context Structure
JSON STRUCTUREGuardduty Security Group Structure
JSON STRUCTUREGuardduty Security Groups Structure
JSON STRUCTUREGuardduty Service Additional Info Structure
JSON STRUCTUREGuardduty Service Structure
JSON STRUCTUREGuardduty Sort Criteria Structure
JSON STRUCTUREGuardduty Source Ips Structure
JSON STRUCTUREGuardduty Sources Structure
JSON STRUCTUREGuardduty Start Monitoring Members Request Structure
JSON STRUCTUREGuardduty Start Monitoring Members Response Structure
JSON STRUCTUREGuardduty Stop Monitoring Members Request Structure
JSON STRUCTUREGuardduty Stop Monitoring Members Response Structure
JSON STRUCTUREGuardduty String Structure
JSON STRUCTUREGuardduty Subnet Ids Structure
JSON STRUCTUREGuardduty Tag Key List Structure
JSON STRUCTUREGuardduty Tag Key Structure
JSON STRUCTUREGuardduty Tag Map Structure
JSON STRUCTUREGuardduty Tag Resource Request Structure
JSON STRUCTUREGuardduty Tag Resource Response Structure
JSON STRUCTUREGuardduty Tag Structure
JSON STRUCTUREGuardduty Tag Value Structure
JSON STRUCTUREGuardduty Tags Structure
JSON STRUCTUREGuardduty Threat Detected By Name Structure
JSON STRUCTUREGuardduty Threat Intel Set Format Structure
JSON STRUCTUREGuardduty Threat Intel Set Ids Structure
JSON STRUCTUREGuardduty Threat Intel Set Status Structure
JSON STRUCTUREGuardduty Threat Intelligence Detail Structure
JSON STRUCTUREGuardduty Threat Intelligence Details Structure
JSON STRUCTUREGuardduty Threat Names Structure
JSON STRUCTUREGuardduty Threats Detected Item Count Structure
JSON STRUCTUREGuardduty Timestamp Structure
JSON STRUCTUREGuardduty Total Structure
JSON STRUCTUREGuardduty Trigger Details Structure
JSON STRUCTUREGuardduty Unarchive Findings Request Structure
JSON STRUCTUREGuardduty Unarchive Findings Response Structure
JSON STRUCTUREGuardduty Unprocessed Account Structure
JSON STRUCTUREGuardduty Unprocessed Accounts Structure
JSON STRUCTUREGuardduty Unprocessed Data Sources Result Structure
JSON STRUCTUREGuardduty Untag Resource Request Structure
JSON STRUCTUREGuardduty Untag Resource Response Structure
JSON STRUCTUREGuardduty Update Detector Request Structure
JSON STRUCTUREGuardduty Update Detector Response Structure
JSON STRUCTUREGuardduty Update Filter Request Structure
JSON STRUCTUREGuardduty Update Filter Response Structure
JSON STRUCTUREGuardduty Update Findings Feedback Request Structure
JSON STRUCTUREGuardduty Update Findings Feedback Response Structure
JSON STRUCTUREGuardduty Update Ip Set Request Structure
JSON STRUCTUREGuardduty Update Ip Set Response Structure
JSON STRUCTUREGuardduty Update Malware Scan Settings Request Structure
JSON STRUCTUREGuardduty Update Member Detectors Request Structure
JSON STRUCTUREGuardduty Update Member Detectors Response Structure
JSON STRUCTUREGuardduty Update Threat Intel Set Request Structure
JSON STRUCTUREGuardduty Update Threat Intel Set Response Structure
JSON STRUCTUREGuardduty Usage Account Result List Structure
JSON STRUCTUREGuardduty Usage Account Result Structure
JSON STRUCTUREGuardduty Usage Criteria Structure
JSON STRUCTUREGuardduty Usage Data Source Result List Structure
JSON STRUCTUREGuardduty Usage Data Source Result Structure
JSON STRUCTUREGuardduty Usage Feature List Structure
JSON STRUCTUREGuardduty Usage Feature Result List Structure
JSON STRUCTUREGuardduty Usage Feature Result Structure
JSON STRUCTUREGuardduty Usage Feature Structure
JSON STRUCTUREGuardduty Usage Resource Result List Structure
JSON STRUCTUREGuardduty Usage Resource Result Structure
JSON STRUCTUREGuardduty Usage Statistic Type Structure
JSON STRUCTUREGuardduty Usage Statistics Structure
JSON STRUCTUREGuardduty Volume Detail Structure
JSON STRUCTUREGuardduty Volume Details Structure
JSON STRUCTUREGuardduty Volume Mount Structure
JSON STRUCTUREGuardduty Volume Mounts Structure
JSON STRUCTUREGuardduty Volume Structure
JSON STRUCTUREGuardduty Volumes Structure
JSON STRUCTUREGuardduty Vpc Config Structure
JSON STRUCTUREScroll for all 439
Examples 303
Example request and response payloads for these APIs.
Amazon Guardduty Example
EXAMPLEGuardduty Action Example
EXAMPLEGuardduty City Example
EXAMPLEGuardduty Condition Example
EXAMPLEGuardduty Container Example
EXAMPLEGuardduty Country Example
EXAMPLEGuardduty Criterion Example
EXAMPLEGuardduty Evidence Example
EXAMPLEGuardduty Finding Example
EXAMPLEGuardduty Host Path Example
EXAMPLEGuardduty Invitation Example
EXAMPLEGuardduty Master Example
EXAMPLEGuardduty Member Example
EXAMPLEGuardduty Owner Example
EXAMPLEGuardduty Resource Example
EXAMPLEGuardduty Scan Example
EXAMPLEGuardduty Service Example
EXAMPLEGuardduty Tag Example
EXAMPLEGuardduty Tag Map Example
EXAMPLEGuardduty Total Example
EXAMPLEGuardduty Volume Example
EXAMPLEGuardduty Vpc Config Example
EXAMPLEScroll for all 303
Security Posture 4
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Agentic Access 1
Recommended x-agentic-access execution contracts for AI agents.
Use Cases 5
What developers build with this provider.
Account Compromise Detection
Detect compromised AWS credentials and unauthorized API calls using ML-based anomaly detection.
Insider Threat Monitoring
Identify suspicious behavior from privileged users or compromised internal accounts.
Cryptocurrency Mining Detection
Detect and alert on unauthorized cryptocurrency mining using EC2 or Lambda resources.
Malware Detection
Scan workloads and data for malware and ransomware threats.
Data Exfiltration Prevention
Identify unusual data access patterns and potential exfiltration from S3 buckets.
Integrations 5
Pre-built integrations with other platforms and tools.
AWS Security Hub
Automatically send GuardDuty findings to Security Hub for centralized security management.
Amazon EventBridge
Trigger automated responses to findings using EventBridge rules and Lambda functions.
AWS Organizations
Enable GuardDuty organization-wide for centralized multi-account threat monitoring.
Amazon Detective
Investigate GuardDuty findings in depth using Detective for root cause analysis.
Amazon Macie
Combine with Macie for comprehensive data security and threat detection.
Resources
Get Started 3
Portal, sign-up, and the first successful call
Documentation 1
Reference material describing how the API behaves
Agent Surfaces 1
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 2
Pagination, idempotency, versioning, errors, and events
Build 2
SDKs, sample code, and the tooling you integrate with
Access & Security 4
Authentication, authorization, and security posture
Operate 3
Status, limits, changes, and where to get help
Commercial 2
Pricing, plans, and the legal terms of use
Company 1
The organization behind the API