resource "aws_guardduty_detector" "MyDetector" {

  datasources {

    kubernetes {

      audit_logs {
        enable = false
      }
    }

    malware_protection {

      scan_ec2_instance_with_findings {

        ebs_volumes {
          enable = true
        }
      }
    }

    s3_logs {
      enable = true
    }
  }
  enable = true
}