Enabling Runtime Monitoring for a standalone account

Console

1. Sign in to the AWS Management Console and open the GuardDuty console at https://console.aws.amazon.com/guardduty/.

2. In the navigation pane, choose Runtime Monitoring.

3. Under the Configuration tab, choose Enable to enable Runtime Monitoring for your account.

4. For GuardDuty to receive the runtime events from one or more resource types – an Amazon EC2 instance, Amazon ECS cluster, or an Amazon EKS cluster, use the following options to manage the security agent for these resources:

   To enable GuardDuty security agent

   • Managing automated security agent for Amazon EC2 instance

   • Managing security agent manually for Amazon EC2 instance

   • Managing automated security agent for Fargate (Amazon ECS only)

   • Managing security agent automatically for Amazon EKS clusters

   • Managing security agent manually for Amazon EKS cluster