Amazon GuardDuty
by Amazon Web Services
AWS threat detection service that analyzes CloudTrail, VPC flow logs and DNS logs to produce security findings.
- Category
- IT, Security & Monitoring
- Type
- Cloud security
- Interface
- REST API
- Built with
- Connect Anything
- Credentials
- AWS access keys
02Data
What you can sync.
- Findings
- Detectors
- Finding statistics
- Coverage
- Malware scans
Keep Amazon GuardDuty findings in your own Lake, on your servers, and report on it with the rest of IT.
Need more? Name any other Amazon GuardDuty data the API returns, and the AI adds it to the connector.
03Credentials
Credentials you will need.
- AWS access keys
Amazon GuardDuty uses AWS access keys. You add the credentials once, when the AI asks for them, and it tells you where to create them in Amazon Web Services if you need help.
04How it works
How it works in DataMind.
-
Pick Amazon GuardDuty.
Open Lake, pick Amazon GuardDuty in the source picker and name the connection. Connect Anything opens with a ready prompt that points the AI at the Amazon GuardDuty API docs.
-
Answer a few questions.
The AI reads the Amazon GuardDuty documentation, then asks which credentials you will use, which data to sync (for example findings and detectors), whether you want a one-time load or a recurring sync, and which accounts or filters apply.
-
Your data lands in Lake.
The connector agent writes a Python connector for Amazon GuardDuty, tests it against the live API and shows you sample rows. Then the data loads into your Lake on your schedule, ready for the Warehouse, DataPrism BI and AI Minds.
05Related
