Amazon GuardDuty: AWS GuardDuty Organization Configuration for EKS Runtime Monitoring

My Saved Presets

Configures AWS GuardDuty to monitor EKS runtime and manage EKS add-ons with automatic enablement settings.

Terraform Template

resource "aws_guardduty_detector" "example" {
  enable = true
}

resource "aws_guardduty_organization_configuration_feature" "eks_runtime_monitoring" {

  additional_configuration {
    auto_enable = "NEW"
    name = "EKS_ADDON_MANAGEMENT"
  }
  auto_enable = "ALL"
  detector_id = aws_guardduty_detector.example.id
  name = "EKS_RUNTIME_MONITORING"
}