Amazon Detective makes it much easier to conduct faster and more efficient investigations into security issues across AWS workloads.
The service automatically collects log data from a customer's resources and then uses machine learning, statistical analysis and graph theory to build interactive visualizations that allow customers to analyze, investigate and quickly identify the root cause of potential security issues or suspicious activities.
- AWS: Your complete guide to Amazon Web Services & features
- Google Cloud wants to help you detect security threats
- Microsoft launches Azure Security Lab for greater cloud protection
There are also no additional charges or commitments to use Amazon Detective and customers pay only for data ingested from AWS CloudTrail, Amazon Virtual Private Cloud (VPC) Flow Logs and Amazon GuardDuty findings.
To start using Amazon Detective, AWS customers must first enable the service in the AWS Management Console. From there, the service automatically begins distilling and organizing data from AWS CloudTrail, Amazon VPC Flow Logs and Amazon GuardDuty findings into a graph model that summarizes resource behaviors and interactions observed across an AWS customer's environment.
By using machine learning, statistical analysis and graph theory, Amazon Detective produces tailored visualizations to help customers answer questions without having to organize any data or develop, configure or tune their own queries and algorithms. The service will also allow security teams to more quickly move on to remediation as Amazon Detective handles all of the necessary data sifting.
Vice president of security services at AWS, Dan Plastina explained why the company created the service in a press release, saying:
“Even when customers tell us their security teams have the tools and information to confidently detect and remediate issues, they often say they need help when it comes to understanding what caused the issues in the first place. Gathering the information necessary to conduct effective security investigations has traditionally been a burdensome process, which can put crucial in-depth analysis out of reach for smaller organizations and strain resources for larger teams. Amazon Detective takes all of that extra work off of the customer’s plate, allowing them to focus on finding the root cause of an issue and ensuring it doesn’t happen again.”
Amazon Detective is available now in the US East (N. Virginia), US East (Ohio), US West (Oregon), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Paris), Europe (Stockholm), Asia Pacific (Mumbai), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), and South America (Sao Paulo) regions with availability in more regions coming soon.
- We've also highlighted the best cloud computing services
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home.