Does AWS have documentation that says GuardDuty takes 7-14 days? If so could someone post a link to it please? I’ve searched but can’t seem to find it.
Thanks for the help
1 Answers
Hi there,
If you look at the Amazon GuardDuty FAQs, there is a question that mostly answers this.
Q: How quickly does GuardDuty start working?
Once enabled, Amazon GuardDuty immediately starts analyzing for malicious or unauthorized activity. The timeframe to begin receiving findings depends on the activity level in your account. GuardDuty does not look at historical data, only activity that starts after it is enabled. If GuardDuty identifies any potential threats, you’ll receive a finding in the GuardDuty console.
When Faye says 7-14 days, it’s not exact. This is the primary reason that GuardDuty is free for the first 30 days. They don’t want to charge you for it until it’s actually useable.
Thanks T.J. I’m running a POC and was wondering why wasn’t seeing any results after 14 days. It makes more sense now.
Yeah, you’ll want to make sure that plenty of traffic is going through that account for GuardDuty to really detect when things occur.