Questions tagged [guardduty]
4 questions
3
votes
1 answer
GuardDuty tells me private instances are being probed by hosts on the internet
This is weird, I'm having some instances running in a private subnet. Those subnets are not exposed to the Internet directly, they don't have a public IP and all outgoing traffic is routed through a NAT instance.
However, GuardDuty gives me warnings…
Jeroen Jacobs
- 1,386
- 3
- 16
- 25
1
vote
0 answers
aws guardduty some alerts won't notify on slack
I have recently setup aws guardduty with slack notification using this guide right https://medium.com/@damitj07/how-to-create-a-slack-alert-for-guardduty-49d542927529, there were a few issues with the code regarding how to read the json, but i fixed…
logax
- 129
- 3
- 14
0
votes
0 answers
List of global AWS resource types
We are working on aggregating the AWS GuardDuty security findings across all our regions and organization accounts into one spot.
The Best Practices guide suggests to suppress findings related to "Global Resources" in all regions except the…
Capt. Crunch
- 839
- 2
- 12
- 25
0
votes
1 answer
Internal Server Error when uploading threat lists to AWS Guard Duty
I'm currently using CloudFormation Templates to automate uploading threat intelligence sets to AWS Guard Duty. After weeks of successful testing, I'm now getting internal server errors whenever I try to upload a threat intelligence set. This…
jfeldzy
- 1
- 1