Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following data sources:
VPC flow logs, Amazon Web Services CloudTrail management event logs, CloudTrail S3 data event logs, EKS audit logs,
DNS logs, and Amazon EBS volume data.