Back to All Checks
High GuardDuty Regional

GuardDuty S3 Protection should be enabled

PCI DSS v4.0.1PCI DSS v11.5.1

Description

Ensures GuardDuty S3 Protection is enabled across all accounts to monitor object-level API operations and identify potential security risks in S3 buckets.

Remediation

To enable GuardDuty S3 Protection, you need to configure the S3 Protection settings in GuardDuty.

Steps

  1. Navigate to the Amazon GuardDuty console
  2. Go to 'Settings' in the left navigation
  3. Select 'S3 Protection'
  4. Enable 'S3 Protection'
  5. Configure the protection settings as needed
  6. Save the configuration
  7. Verify that S3 Protection is active

Compliance

PCI DSS v4.0.1PCI DSS v11.5.1
Start Your Free Security Check