GuardDuty EKS protection should be enabled

What it checks

GuardDuty detector: GuardDuty EKS Protection is disabled.

Where it applies

Terraform: aws_guardduty_detector

CloudFormation: AWS::GuardDuty::Detector

How to fix it

1. Add datasources { kubernetes { audit_logs { enable = true } } } to the GuardDuty detector

Frameworks

• SOC 2 CC7.2

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules