Skip to main content

Amazon GuardDuty

Amazon GuardDuty is an application template in the AWS Services category of the Application Catalog. Its card describes it as Amazon GuardDuty event import. Installing it from the form below adds an application to Applications. Its template ID, AmazonGuardDuty, is the one listed on Application Templates.

Menu path: Applications → Install Application → Amazon GuardDuty · URL path: /v2/applications/install?template=AmazonGuardDuty

Task guide: AWS GuardDuty

Install Amazon GuardDuty form with the Application section's Instance name and Display name fields, the Configuration section's AWS Regions, Pre-defined AWS Role, IAM access key and IAM access secret fields, and Advanced configuration expanded to datalake and datalake index name, above Cancel, Dry run and Install Application

Application​

The two fields every install form starts with: Instance name names this installation in its URL, and Display name is shown for it on Applications and its details page.

FieldTypeRequiredDefault
Instance nameTextYesdefault
Display nameTextYesDefault

Configuration​

FieldTypeRequiredDefault
AWS RegionsDrop-down listYes-
Pre-defined AWS RoleDrop-down listNo-
IAM access keyTextNo-
IAM access secretPasswordNo-
  • AWS Regions takes one or more of 11 regions: US N.Virginia, US Ohio, US N.California, US Oregon, Canada Central, Africa Cape Town, Europe Frankfurt, Europe Ireland, Europe London, Europe Paris, Europe Stockholm.
  • Pre-defined AWS Role lists the IAM roles registered on AWS Roles.

Advanced configuration​

Collapsed when the form opens; click its heading to show the data lake the application writes to.

FieldTypeRequiredDefault
datalakeTextYesmanaged
datalake index nameTextYesGuardDuty

Install​

Install Application installs Amazon GuardDuty with the values in the form; Dry run checks them first, without installing (see Dry run); Cancel returns to the catalog without installing. Every template's form shares the shape described under Install Form.