What AWS GuardDuty is
Every organization using AWS should absolutely turn on GuardDuty as their first cloud security step. They provide awesome base level protections and detections at a low price. An especially amazing check the box runtime protection tool. The vendor site is www.amazon.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What AWS GuardDuty covers
AWS GuardDuty is in the catalog for these capabilities. Categories: CDR, CNAPP, and Kubernetes Security. Catalog tags: Hands-on, Included, Best for Enterprise, and Best for Startups.
How to evaluate AWS GuardDuty in a security program
Use AWS GuardDuty as a stack candidate, not as diligence evidence. The oneNorma score for AWS GuardDuty is 6.3/10 (percentile 89). If the real gap is in CDR, CNAPP, and Kubernetes Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.amazon.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
