Introducing Amazon GuardDuty AI Protection for Amazon Web Services AI workloads
Amazon GuardDuty now offers AI Protection, expanding threat detection to Amazon Web Services AI services, such as Amazon SageMaker. As organizations rapidly adopt AI, security teams may lack visibility into threats specifically targeting AI workloads, such as anomalous model invocations, and cost harvesting attacks. GuardDuty AI Protection continuously monitors these workloads so security teams can detect and respond to AI-specific threats without manual configuration or custom tooling.
GuardDuty AI Protection analyzes both CloudTrail management and data events from Amazon Web Services AI services such as Amazon Sagemaker, to identify suspicious activity, including unusual invocation patterns, and cost harvesting attacks where threat actors force AI resources to consume excessive GPU time and tokens. Threat findings flow directly into Amazon Security Hub, giving teams a single view of AI assets and threats for prioritized response. GuardDuty AI Protection can be enabled with a few steps in the GuardDuty or Security Hub console, and using Amazon Organizations, can be centrally enabled for all accounts in an organization.
GuardDuty AI Protection is available to GuardDuty customers with a 30-day free trial. For pricing details, visit the Amazon GuardDuty pricing page. To learn more, see the Amazon GuardDuty User Guide and the Amazon GuardDuty product page.