GuardDuty detector should be enabled

What it checks

GuardDuty detector: GuardDuty is disabled.

Where it applies

Terraform: aws_guardduty_detector

CloudFormation: AWS::GuardDuty::Detector

How to fix it

1. Set enable = true. Enable all data sources (S3 logs, Kubernetes audit logs, Malware Protection) for maximum coverage.

Frameworks

• AWS FSBP GuardDuty.1
• SOC 2 CC7.2
• HIPAA 164.312(b)
• PCI-DSS v4.0.1/11.5.1

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules