# Amazon GuardDuty

**Canonical:** https://apis.io/providers/amazon-guardduty/  
**Website:** https://aws.amazon.com/guardduty/  
**APIs profiled:** 4

Amazon GuardDuty is an intelligent threat detection service that continuously monitors your AWS accounts, workloads, and data for malicious activity. It uses machine learning, anomaly detection, and integrated threat intelligence to identify and prioritize potential threats to your AWS environment.

## Kin Score — 53.1 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 53.1).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 76.2 |
| Governance | 13.6 |
| Contract Governance | 13.6 |
| Operational Transparency | 26.3 |
| Developer Ergonomics | 50.0 |
| Commercial Clarity | 57.9 |
| Access Clarity | 57.9 |

## Agent readiness — 49.6 (agent-native)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | verified |
| Error Semantics | verified |
| OpenAPI Examples | verified |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (4)

- **Amazon GuardDuty Admin API** — The Admin API from Amazon GuardDuty — 3 operation(s) for admin.
- **Amazon GuardDuty Detector API** — The Detector API from Amazon GuardDuty — 37 operation(s) for detector.
- **Amazon GuardDuty Invitation API** — The Invitation API from Amazon GuardDuty — 4 operation(s) for invitation.
- **Amazon GuardDuty Tags API** — The Tags API from Amazon GuardDuty — 2 operation(s) for tags.

## Agentic access (1)

- **Amazon Guardduty Agentic Access** — 67 operations · 48 acting · 2 human-in-the-loop

## Security (4)

- **Amazon Guardduty Authentication** — apiKey · 1 scheme
- **Amazon Guardduty Domain Security** — TLSv1.3 · HSTS · DMARC
- **Amazon Guardduty Vulnerability Disclosure** — security.txt · contact published
- **Amazon Guardduty Trust Center** — PCI DSS, HIPAA, FedRAMP, GDPR, FIPS 140

## Plans (1)

- **Amazon Guardduty Plans Pricing**

## Use cases (5)

- **Account Compromise Detection** — Detect compromised AWS credentials and unauthorized API calls using ML-based anomaly detection.
- **Insider Threat Monitoring** — Identify suspicious behavior from privileged users or compromised internal accounts.
- **Cryptocurrency Mining Detection** — Detect and alert on unauthorized cryptocurrency mining using EC2 or Lambda resources.
- **Malware Detection** — Scan workloads and data for malware and ransomware threats.
- **Data Exfiltration Prevention** — Identify unusual data access patterns and potential exfiltration from S3 buckets.

## Tags

Anomaly Detection, Compliance, Machine-Learning, Monitoring, Security, Threat Detection

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/amazon-guardduty/). Scores are computed from the provider's own public artifacts under a published rubric.