blog/amazon-guardduty-pricing

[giscus[bot]]

blog/amazon-guardduty-pricing

Complete guide to Amazon GuardDuty pricing. Covers all 7 protection plans, real cost examples, hidden fees, and optimization tips. Free calculator.

https://cloudburn.io/blog/amazon-guardduty-pricing

[maverick-leo]

Thank you for this article. it provides a great overview of GuardDuty billing.

One point, I would like to add is "How GuardDuty handles AWS CloudTrail Global Service Events (GSEs)"

AWS Doc: "When GuardDuty consumes CloudTrail Global service events (GSE) with security value such as network configurations or user permissions, it replicates those events and processes them in each Region where you have enabled GuardDuty. This behavior helps GuardDuty maintain user and role profiles in each Region, which is vital to detecting anomalous events."
https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html

Guard Duty analyzes GSEs (Ex: IAM events in us-east-1) in every Region where GuardDuty is enabled. As a result, these events are billed once for each GuardDuty enabled Region. :)