Amazon GuardDuty now supports Malware Protection for Amazon S3 and enhanced Malware Protection for Amazon EC2
Amazon GuardDuty now offers Malware Protection for Amazon S3 and enhanced Malware Protection for Amazon EC2 in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.
GuardDuty Malware Protection for Amazon S3 is a fully managed capability that automatically scans newly uploaded objects to your Amazon S3 buckets for malware, viruses, and other suspicious uploads, enabling you to take action to isolate them before they are ingested into downstream processes. Application owners can enable Malware Protection for S3 on their designated buckets even if core GuardDuty is not enabled in the account. Scan results are automatically delivered through Amazon EventBridge, allowing you to build downstream workflows such as isolating malicious objects to a quarantine bucket or defining bucket policies using scan result tags to prevent users or applications from accessing flagged objects.
GuardDuty Malware Protection for Amazon EC2 now supports scanning of EBS volumes encrypted with an EBS managed key, in addition to existing support for unencrypted volumes and volumes encrypted with customer managed CMKs. This expands malware detection coverage to a broader set of EC2 workloads without requiring customers to change their encryption configurations. Additionally, on-demand malware scan is now available, allowing customers to initiate a malware scan request for their Amazon EC2 instances at any time, providing flexibility to investigate potential threats outside of the automated GuardDuty-initiated scan workflow.
These launches bring full feature parity with all existing Amazon Web Services commercial Regions, including the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD, where GuardDuty Malware Protection is available. To get started, visit the Amazon GuardDuty product page or the GuardDuty pricing page for more information.