Threat detection and management

It is no surprise that AWS has a wide range of security services designed to help protect and guard your infrastructure. Within that scope, they also offer threat detection as another tool you can utilize to help you in your effort of minimizing security incidents.  

AWS GuardDuty is a regional-based managed service powered by machine learning, specifically designed to be an intelligent threat detection service. It is used to monitor logs from other AWS services and features, including VPC Flow Logs, DNS logs, and AWS CloudTrail event logs. AWS GuardDuty looks at these logs to detect unexpected and unusual behavior and cross-reference these analytics with a number of threat detection and security feeds that can help us identify potentially malicious activity and anomalies.

As I already stated, the service itself is powered by machine learning and, by its very nature, this allows the service to continually learn the patterns within your infrastructure...