GuardDuty S3 protection should be enabled

What it checks

GuardDuty detector: GuardDuty is enabled but S3 Protection is off.

Where it applies

Terraform: aws_guardduty_detector

CloudFormation: AWS::GuardDuty::Detector

How to fix it

1. Add datasources { s3_logs { enable = true } } to the GuardDuty detector resource

Frameworks

• SOC 2 CC7.2
• HIPAA 164.312(b)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules