Runtime Monitoring for EC2 workloads on Amazon ECS
Use this option when you use EC2 instances for your capacity, or when you need granular control of Runtime Monitoring at the cluster-level on Fargate.
You provision the clusters for Runtime Monitoring by adding a pre-defined tag.
For EC2 container instances, you download, install, and manage the GuardDuty security agent.
For Fargate, GuardDuty manages the security agent on your behalf.