From the course: Complete Guide to AWS Security and Compliance Management

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

Understanding Amazon Detective

Understanding Amazon Detective

- [Narrator] AWS provides many Detective controls to help you understand the security happenings in your account. To help streamline your ability to troubleshoot curious security related events, AWS created Amazon Detective. Let's explore how Detective works and how it can help you root cause security related concerns. Although Detective is not free, it does have a tiered pricing model based on the number of gigabytes of logs it ingests. Detective is capable of helping you diagnose security issues across multiple AWS accounts. It's also important to understand that Detective is regional in nature. If you operate in multiple regions and you want to use this service, you'll need to enable Detective in every region in which you operate. While Detective can be used on its own, it works best when connected with guard duty and security hub. Paired with GuardDuty, Detective ingests VPC Flow Logs, CloudTrail, and other Detective tools in the AWS ecosystem to establish threat intelligence in…

Contents