Maintained with ☕️ by
IcePanel logo

Amazon GuardDuty Price Reduction



Amazon GuardDuty is reducing the price of threat detection by adding an additional volume discount tier and further optimizing its CloudTrail analysis. Effective March 1, 2020, GuardDuty pricing for VPC Flow Log and DNS Log analysis now includes a new top discount tier of $0.15 per GB, representing a 40% reduction from the existing top discount tier of $0.25 per GB. This top discount tier is applicable to customers that generate more than 10,000 gigabyte (GB) per month in VPC Flow Log and DNS log analysis. The new pricing is now the following for US East (N. Virginia): $1.00 per GB for the first 500 GB of VPC Flow Log and DNS Log analysis $0.50 per GB for the next 2,000 GB of VPC Flow Log and DNS Log analysis $0.25 per GB for the next 7,500 GB of VPC Flow Log and DNS Log analysis \[NEW\] $0.15 per GB for VPC Flow Log and DNS Log analysis over 10,000 GB See [GuardDuty pricing](/guardduty/pricing/) for all regions. GuardDuty is also introducing a third round of CloudTrail optimizations, following optimizations in [June](/about-aws/whats-new/2018/06/amazon-guardduty-optimizes-aws-cloudtrail-analysis-reducing-cost-for-customers/) and [November](/about-aws/whats-new/2018/11/amazon-guardduty-optimizes-aws-cloudtrail-analysis-reducing-cost-for-customers/) of 2018\. These optimizations result in fewer events being processed for threat detection, lowering cost for all GuardDuty customers. Cost reductions will vary by customer based on log volume. During this time, Amazon GuardDuty has also more than doubled its security detections and iterated on many of the existing detections to improve accuracy and reduce alert volume for most customers. To receive programmatic updates on new Amazon GuardDuty features and threat detections, please subscribe to the [Amazon GuardDuty SNS topic]( Available globally, [Amazon GuardDuty](/guardduty/) continuously monitors for malicious or unauthorized behavior to help protect your AWS resources, including your AWS accounts and access keys. GuardDuty identifies unusual or unauthorized activity, like cryptocurrency mining or infrastructure deployments in a region that has never been used. Powered by threat intelligence and machine learning, GuardDuty is continuously evolving to help you protect your AWS environment. You can enable your 30-day free trial of Amazon GuardDuty with a single-click in the AWS Management console. Please see the [AWS Regions](/about-aws/global-infrastructure/regional-product-services/) page for all the regions where GuardDuty is available. To learn more, see [Amazon GuardDuty Findings]( and to start your 30-day free trial, see [Amazon GuardDuty Free Trial](/guardduty/pricing/).