Amazon GuardDuty via S3
Amazon GuardDuty via S3 is an application template in the AWS Services category of the Application Catalog. Its card describes it as Amazon GuardDuty findings exported to S3, read via SQS notification. Installing it from the form below adds an application to Applications. Its template ID, AmazonGuardDutyS3, is the one listed on Application Templates.
Menu path: Applications → Install Application → Amazon GuardDuty via S3 · URL path: /v2/applications/install?template=AmazonGuardDutyS3
Application
The two fields every install form starts with: Instance name names this installation in its URL, and Display name is shown for it on Applications and its details page.
| Field | Type | Required | Default |
|---|---|---|---|
| Instance name | Text | Yes | default |
| Display name | Text | Yes | Default |
Configuration
| Field | Type | Required | Default |
|---|---|---|---|
| AWS Region of the SQS queue | Drop-down list | Yes | US N.Virginia |
| SQS notification queue url | Text | Yes | - |
| Pre-defined AWS Role | Drop-down list | No | - |
| Pre-defined AWS User | Drop-down list | No | - |
| IAM access key | Text | No | - |
| IAM access secret | Password | No | - |
- AWS Region of the SQS queue is one of 11 regions: US N.Virginia, US Ohio, US N.California, US Oregon, Canada Central, Africa Cape Town, Europe Frankfurt, Europe Ireland, Europe London, Europe Paris, Europe Stockholm.
- Pre-defined AWS Role lists the IAM roles registered on AWS Roles.
Advanced configuration
Collapsed when the form opens; click its heading to show the data lake the application writes to.
| Field | Type | Required | Default |
|---|---|---|---|
| datalake | Text | Yes | managed |
| datalake index name | Text | Yes | GuardDuty |
Install
Install Application installs Amazon GuardDuty via S3 with the values in the form; Dry run checks them first, without installing (see Dry run); Cancel returns to the catalog without installing. Every template's form shares the shape described under Install Form.