EC2 Protection Resources

Overview

The following are curated links for EC2 related Protections.

GuardDuty Findings

The following are GuardDuty findings that trigger a malware scan.

Findings that invoke GuardDuty-initiated malware scan - Amazon GuardDutyAmazon GuardDuty

Malware Scan From Multi-Account Setup

The following is a link on how to setup a scanning on a member account within a Multi-account setup

Enabling GuardDuty-initiated malware scan in multiple-account environments - Amazon GuardDutyAmazon GuardDuty

Malware Scan Standalone Setup

The following is a link to how to setup a scanning in a standalone acount.

Enabling GuardDuty-initiated malware scan for a standalone account - Amazon GuardDutyAmazon GuardDuty

On-Demand Scanning

Link to how to setup on demand scanning.

Starting On-demand malware scan in GuardDuty - Amazon GuardDutyAmazon GuardDuty

Rescanning can occur after one hour of the initial request

GuardDuty Service Account Reference

The following is a list of service accounts that generate a log when snapshots are shared with GuardDuty.

GuardDuty service accounts by AWS Region - Amazon GuardDutyAmazon GuardDuty

EC2 Quotas

The following list of quotas as far as limits on the nested levels that can be scaned, number of files to be scanned, EBS volume size and more.

Quotas in Malware Protection for EC2 - Amazon GuardDutyAmazon GuardDuty