# EC2 Protection Resources

## Overview

The following are curated links for EC2 related Protections.

### GuardDuty Findings

The following are GuardDuty findings that trigger a malware scan.&#x20;

{% embed url="<https://docs.aws.amazon.com/guardduty/latest/ug/gd-findings-initiate-malware-protection-scan.html>" %}

### Malware Scan From Multi-Account Setup

The following is a link on how to setup a scanning on a member account within a Multi-account setup

{% embed url="<https://docs.aws.amazon.com/guardduty/latest/ug/configure-malware-protection-guardduty-initiated-multi-account.html>" %}

### Malware Scan Standalone Setup

The following is a link to how to setup a scanning in a standalone acount.

{% embed url="<https://docs.aws.amazon.com/guardduty/latest/ug/configure-malware-protection-single-account.html>" %}

## On-Demand Scanning

Link to how to setup on demand scanning.

{% embed url="<https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection-getting-started-on-demand-scan.html>" %}

{% hint style="danger" %}
Rescanning can occur after one hour of the initial request
{% endhint %}

### GuardDuty Service Account Reference

The following is a list of service accounts that generate a log when snapshots are shared with GuardDuty.&#x20;

{% embed url="<https://docs.aws.amazon.com/guardduty/latest/ug/gdu-service-account-region-list.html>" %}

### EC2 Quotas

The following list of quotas as far as limits on the nested levels that can be scaned, number of files to be scanned, EBS volume size and more.&#x20;

{% embed url="<https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection-limitations.html>" %}
