Basics of Amazon GuardDuty (AWS Partner-led Support)

This course introduces Amazon GuardDuty. GuardDuty is a threat detection service for AWS Cloud customers. Throughout this course, you learn basic concepts about GuardDuty and the services that it provides, including account types, lists, and findings. You also learn about the usage and cost structure of GuardDuty.

• Course level: Fundamental
• Duration: 1 hour

Activities

This course includes presentations and demonstrations.

Course objectives

By the end of this course, you should understand the following:

• Introduce Amazon GuardDuty.
• Explain what GuardDuty reads from the account.
• Discuss the types of GuardDuty outputs.
• Describe how to locate GuardDuty findings.
• Explain the difference between management accounts and member accounts and learn about the costs associated with GuardDuty.

Intended audience

This course is intended for the following roles:

• AWS Partner-Led Support (PLS) personnel

Prerequisites

We recommend that attendees of this course have the following:

• An AWS account

Course outline

Module 1: Introduction

• Basics of Amazon GuardDuty
• Course navigation
• Course objectives

Module 2: Amazon GuardDuty

• Amazon GuardDuty

Module 3: GuardDuty readings

• GuardDuty logs
• More about GuardDuty logs

Module 4: GuardDuty outputs

• GuardDuty outputs
• GuardDuty findings

Module 5: GuardDuty management and member accounts

• Management and member GuardDuty accounts
• More about management and member accounts

Module 6: GuardDuty costs

• GuardDuty costs
• More about GuardDuty costs

Module 7: GuardDuty demonstration

• GuardDuty demonstration
• Log into GuardDuty console
• View GuardDuty Findings
• View GuardDuty Lists
• View GuardDuty management and member accounts
• View GuardDuty usages and costs

Module 8: Summary

• Summary

Module 9: Feedback

• Feedback email