Pricing in GuardDuty
This section focuses on the AWS Free Tier model that GuardDuty uses for various protection plans, and how you can
view estimated and actual usage costs. If you
are looking for the pricing details associated with all the protection plans across supported Regions,
see GuardDuty
pricing
AWS Free Tier helps you explore and try out AWS services free of charge up to specified limits for each service. There are three categories – 12 months free, always free, and short-term free trials. Amazon GuardDuty belongs to the short-term free trial category and offers a 30-day free trial. When you continue using GuardDuty after this free trial ends, you start incurring cost based on how you use this service.
On-demand malware scan (under Malware Protection for EC2) and Malware Protection for S3 don't fall into the GuardDuty 30-day short term free trial category. Malware Protection for S3 falls into the 12 months free category of the AWS Free Tier whereas the On-demand malware scan follows a pay-as-you-use cost model. There is no 30-day free trial or a 12-month Free Tier cost model with On-demand malware scan.
Using GuardDuty 30-day free trial
When using GuardDuty for the first time in an AWS Region, your AWS account is automatically enrolled in a 30-day free trial in that Region. Some of the protection plans will also get enabled automatically and are included in the 30-day free trial. Because GuardDuty is a regional service, when you enable it for the first time in a different Region, your account will get a 30-day free trial of GuardDuty and some supported protection plans in that Region.
When working with multiple accounts in a GuardDuty organization, each account gets its own 30-day free trial to use GuardDuty and protection plans.
The following table shows which protection plans are enabled automatically when you enable GuardDuty for the first time.
Protection plan | Included in GuardDuty 30-day free trial | Has its own 30-day free trial1 |
---|---|---|
Yes | Yes | |
Yes | Yes | |
Malware Protection for EC2 – GuardDuty-initiated malware scan |
Yes | Yes |
Malware Protection for EC2 – On-demand malware scan in GuardDuty |
No | No |
No | No | |
Yes | Yes | |
No | Yes | |
Yes | Yes |
1Each protection plan has its own free trial. For example, when you enable a protection plan after GuardDuty 30-day free trial expired for your account and a new protection plan gets released, you can enable this protection plan with its own free trial. For more information about free trials for protection plans, see the document associated with each protection plan.
View estimated usage cost during free trial – During 30-day free trial of GuardDuty and potentially a protection plan, GuardDuty provides estimated usage cost for your account. If you're a delegated GuardDuty administrator account, you can view the total estimated usage cost and account-level breakdown for all the member accounts that have enabled GuardDuty. For more information, see Estimating GuardDuty usage cost.
Usage cost after free trial ends – When
you continue using GuardDuty or any of its protection plans after the free trial ends,
you will start incurring associated usage costs. To view your bill, navigate to
Cost Explorer in the https://console.aws.amazon.com/billing/
Using Malware Protection for S3 with 12-month Free Tier
Malware Protection for S3 uses a Free Tier plan associated with your AWS accounts that are either new, have an ongoing free tier, or have an expired 12-month free tier. For more information, see Pricing and usage cost for Malware Protection for S3.