Amazon GuardDuty for EKS

• https://www.eksworkshop.com/docs/security/guardduty/
• aws-guardduty-agent EKS addon

aws guardduty create-detector --enable --features '[{"Name" : "EKS_AUDIT_LOGS", "Status" : "ENABLED"}, {"Name" : "EKS_RUNTIME_MONITORING", "Status" : "ENABLED", "AdditionalConfiguration" : [{"Name" : "EKS_ADDON_MANAGEMENT", "Status" : "ENABLED"}]}]'

resource "aws_eks_addon" aws-guardduty-agent {
  cluster_name             = module.eks.cluster_name
  addon_name               = "aws-guardduty-agent"
  tags = {
    "eks_addon" = "aws-guardduty-agent"
    "terraform" = "true"
  }
}

Related

• aws eks

See also

• Amazon GuardDuty: aws guardduty[ list-detector | list-findings | create-detector | update-detector ]
• AWS GuardDuty, S3 protection, for EKS. aws guardduty, Finding type, aws-guardduty-agent EKS addon, Runtine Monitoring