Amazon GuardDuty for EKS

• https://www.eksworkshop.com/docs/security/guardduty/
• aws-guardduty-agent EKS addon

aws guardduty create-detector --enable --features '[{"Name" : "EKS_AUDIT_LOGS", "Status" : "ENABLED"}, {"Name" : "EKS_RUNTIME_MONITORING", "Status" : "ENABLED", "AdditionalConfiguration" : [{"Name" : "EKS_ADDON_MANAGEMENT", "Status" : "ENABLED"}]}]'

See also

• AWS GuardDuty, S3 protection, for EKS. aws guardduty, Finding type, aws-guardduty-agent EKS addon, Runtine Monitoring