Regions and endpoints

To view the AWS Regions where Amazon GuardDuty is available, see Amazon GuardDuty endpoints in the Amazon Web Services General Reference.

We recommend that you enable GuardDuty in all supported AWS Regions. This enables GuardDuty to generate findings about unauthorized or unusual activity even in Regions that you are not actively using. This also allows GuardDuty to monitor AWS CloudTrail events for the supported AWS Regions, its ability to detect activity that involves global services is reduced.

Region-specific feature availability

A list of regional differences to specify the availability of GuardDuty features.

GuardDuty features with Region disparity

The following table shows which GuardDuty features might not be available in the specified AWS Regions.

GuardDuty feature	AWS Regions
-	Asia Pacific (Hyderabad)	Europe (Spain)	Europe (Zurich)	Middle East (UAE)
GuardDuty EKS Protection	x	x	x	x
GuardDuty Malware Protection	x	x	x	Available
GuardDuty RDS Protection	x	x	x	x

The following APIs in Amazon GuardDuty API Reference may have regional differences because of the unavailability of some of the data sources in these Regions:

• CreateDetector

• UpdateDetector

• UpdateMemberDetectors

• UpdateOrganizationConfiguration

• GetDetector

• GetMemberDetectors

• DescribeOrganizationConfiguration

• DescribeMalwareScans

• UpdateMalwareScanSettings

• GetMalwareScanSettings

AWS GovCloud (US) Regions

For latest information, see Amazon GuardDuty in the AWS GovCloud (US) User Guide.

China Regions

For latest information, see Feature availability and implementation differences.