Suspending or disabling GuardDuty - Amazon GuardDuty

Suspending or disabling GuardDuty

You can use the GuardDuty console to suspend or disable the GuardDuty service. You don't get charged for using GuardDuty when the service is suspended.

  • All optional data sources must be disassociated from all detectors in all regions before you can suspend or disable GuardDuty.

  • All member accounts must be disassociated or deleted before you can suspend or disable GuardDuty.

  • If you suspend GuardDuty, it no longer monitors the security of your AWS environment or generates new findings. Your existing findings remain intact and are not affected by the GuardDuty suspension. You can choose to re-enable GuardDuty later.

  • If you disable GuardDuty, your existing findings and the GuardDuty configuration are lost and can't be recovered. If you want to save your existing findings, you must export them before you stop GuardDuty. For information on how to export findings, see Exporting findings.

To suspend or disable GuardDuty

  1. Open the GuardDuty console at https://console.aws.amazon.com/guardduty/.

  2. In the navigation pane, choose Settings.

  3. In the Suspend GuardDuty section, choose Suspend GuardDuty or Disable GuardDuty, then Confirm your action.

To re-enable GuardDuty after suspending

  1. Open the GuardDuty console at https://console.aws.amazon.com/guardduty/.

  2. In the navigation pane, choose Settings.

  3. Choose Re-enable GuardDuty.