💼 [GuardDuty.8] GuardDuty Malware Protection for EC2 should be enabled

• ID: /frameworks/aws-fsbp-v1.0.0/guardduty/08

Description

GuardDuty Malware Protection for EC2 helps you detect the potential presence of malware by scanning the Amazon Elastic Block Store (Amazon EBS) volumes that are attached to Amazon Elastic Compute Cloud (Amazon EC2) instances and container workloads. Malware Protection provides scan options where you can decide if you want to include or exclude specific EC2 instances and container workloads at the time of scanning. It also provides an option to retain the snapshots of EBS volumes attached to the EC2 instances or container workloads, in your GuardDuty accounts. The snapshots get retained only when malware is found and Malware Protection findings are generated.

Similar

• AWS Security Hub
  • https://docs.aws.amazon.com/securityhub/latest/userguide/guardduty-controls.html#guardduty-8

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policies (1)

Policy	Logic Count	Flags	Compliance
🛡️ AWS GuardDuty Detector Malware Protection for EC2 is not enabled🟢	1	🟢 x6	no data