AWS-Native Security Tooling

AWS says GuardDuty catches the universal attacks. The rest is your detection engineering.

A new AWS guide draws its coverage line at patterns common to every account, and hands the account-specific half back to the customer as CloudWatch queries.