Does AWS have documentation that says GuardDuty takes 7-14 days? If so could someone post a link to it please? I’ve searched but can’t seem to find it.
Thanks for the help
If you look at the Amazon GuardDuty FAQs, there is a question that mostly answers this.
Q: How quickly does GuardDuty start working?
Once enabled, Amazon GuardDuty immediately starts analyzing for malicious or unauthorized activity. The timeframe to begin receiving findings depends on the activity level in your account. GuardDuty does not look at historical data, only activity that starts after it is enabled. If GuardDuty identifies any potential threats, you’ll receive a finding in the GuardDuty console.
When Faye says 7-14 days, it’s not exact. This is the primary reason that GuardDuty is free for the first 30 days. They don’t want to charge you for it until it’s actually useable.