Home › AWS Security › cloudcomputing › scsthreatresponse › Which AWS service continuously analyses CloudTra…
Which AWS service continuously analyses CloudTrail, VPC Flow Logs, and DNS logs with ML + threat-intel feeds to detect compromised IAM credentials, cryptomining traffic, and anomalous API calls?
AAWS Snowball
BAmazon GuardDuty
CAmazon Route 53
DAmazon RDS
Answer & Solution
Correct answer: B. Amazon GuardDuty
GuardDuty is AWS's managed threat-detection service (per SCS-C02 §1.2). Route 53/Snowball/RDS are unrelated.
Related questions
Which AWS feature provides an audit-trail of every IAM principal action across the AWS accWhich AWS service enables 'continuous compliance' by recording resource config changes andAfter detecting that a long-lived IAM access key has been leaked publicly, which response Which AWS service continuously scans EC2 instances and container images for software vulneWhich AWS service lets a responder query large volumes of CloudTrail / VPC Flow / WAF logsWhich AWS service is the canonical event-routing bus that receives Security Hub / GuardDutWhich AWS service automates incident-response runbooks — e.g. 'on compromised credential fWhich AWS feature lets a responder capture an immutable EBS volume snapshot for forensic a