Skip to content

Contact sales

By filling out this form and clicking submit, you acknowledge our privacy policy.
  • Labs icon Lab
  • A Cloud Guru
Google Cloud Platform icon

Detecting Security Issues Using GuardDuty

Your team has just received word that you will be implementing Amazon GuardDuty into your environment, and you need a test run to make sure you understand how to integrate it with S3 for logging. In this lab, you will create a role, AWS IAM, to successfully allow GuardDuty to talk to other services in the environment as well as configure GuardDuty to export findings to S3. You will configure an AWS Key Management Service key to ensure that all data is secured and confirm that everything is working as intended. Take advantage of the solution videos if you get stuck! Good luck, Gurus!

Google Cloud Platform icon

Path Info

Clock icon Beginner
Clock icon 30m
Clock icon May 03, 2022

Contact sales

By filling out this form and clicking submit, you acknowledge our privacy policy.

Table of Contents

  1. Challenge

    Create a GuardDuty Role

    • Navigate to AWS IAM and then choose roles.
    • Create a role using AWS service.
    • Choose GuardDuty.
    • Create role.
  2. Challenge

    Configure an S3 Bucket for GuardDuty Findings

    • Navigate to GuardDuty and enable it.
    • Click on Settings.
    • Scroll down to Export Options.
    • Configure S3 bucket for export.
    • Name the bucket guardduty<random_numbers>.
    • Use prefix findings.
    • Open KMS in a new tab to create key and adjust policy.
    • Create a single symmetric key in a single Region.
    • Copy and paste the policy provided.
    • Save the key.
    • Navigate back to GuardDuty.
    • Refresh that section and select the KMS key we created.
    • Save this configuration.
    • Adjust the time for the export from 6 hours to 15 minutes.
  3. Challenge

    Generate Sample Findings and Confirm Logs in S3

    • In GuardDuty, navigate to the Generate Sample Findings button in Settings and click it.
    • Verify findings were created by navigating to Findings.
    • Open one of each type of finding to view.
    • Navigate to S3.
    • Click on the bucket we created and click through folders until you see the logs listed.
    • Congratulations on completing this lab!

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Provided environment for hands-on practice

We will provide the credentials and environment necessary for you to practice right within your browser.

Guided walkthrough

Follow along with the author’s guided walkthrough and build something new in your provided environment!

Did you know?

On average, you retain 75% more of your learning if you get time for practice.

Start learning by doing today

View Plans