AWS 推出 Amazon GuardDuty 監控內部網路：「Amazon GuardDuty – Continuous Security Monitoring & Threat Detection」。
從示意圖可以看到結合了許多 log 資料，然後綜合判斷：
In combination with information gleaned from your VPC Flow Logs, AWS CloudTrail Event Logs, and DNS logs, this allows GuardDuty to detect many different types of dangerous and mischievous behavior including probes for known vulnerabilities, port scans and probes, and access from unusual locations.
所以連 Bitcoin 相關網站也當作條件之一 XD
開了相當多區 (相較於之前 AWS Elemental MediaOOXX 系列...)：
Amazon GuardDuty is available in production form in the US East (Northern Virginia), US East (Ohio), US West (Oregon), US West (Northern California), EU (Ireland), EU (Frankfurt), EU (London), South America (São Paulo), Canada (Central), Asia Pacific (Tokyo), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), and Asia Pacific (Mumbai) Regions and you can start using it today!
