Amazon GuardDuty

wikipedia:Amazon GuardDuty (Nov 2017) threat detection uses AWS CloudTrail logs, VPC Flow Logs, and DNS query logs.

• AWS free tier: 30 days https://aws.amazon.com/guardduty/pricing/

Related

• AWS CloudTrail management event analysis

See also

• AWS compliance: AWS CloudTrail, AWS Audit Manager, AWS Artifact
• AWS security, AWS Security Hub, AWS CloudTrail, Amazon GuardDuty, Amazon Detective, AWS WAF, AWS Audit Manager, Amazon Fraud Detector, Cloudsploit, AWS Certified Security - Specialty, AWS Security Assurance Services, AWS GDPR, Amazon Inspector, AWS Network Firewall, Zelkova

https://aws.amazon.com/about-aws/whats-new/2017/11/announcing-amazon-guardduty-intelligent-threat-detection/