Remediation

Enable GuardDuty in a Region

From Command Line

1. o enable GuardDuty in a specific region, run the following command, replacing {{region}} with the target region:

   aws guardduty create-detector --enable --region {{region}}

2. To enable GuardDuty in all available AWS regions, you can use the following shell script:

   #!/bin/bash
   for region in $(aws ec2 describe-regions --query "Regions[].RegionName" --output text); do
   echo "Checking GuardDuty in region: $region"
   
   DETECTOR_ID=$(aws guardduty list-detectors --region $region --query "DetectorIds[0]" --output text)
   
   if [ "$DETECTOR_ID" == "None" ] || [ -z "$DETECTOR_ID" ]; then
       echo "GuardDuty not found in $region. Enabling..."
       aws guardduty create-detector --enable --region $region
   
       if [ $? -eq 0 ]; then
       echo "Successfully enabled GuardDuty in $region."
       else
       echo "Failed to enable GuardDuty in $region."
       fi
   else
       echo "GuardDuty is already enabled in $region with Detector ID: $DETECTOR_ID"
   fi
   done