Encryption in transit
GuardDuty analyzes log data from other services. It encrypts all data in transit from these services with HTTPS and KMS. Once GuardDuty extracts the information it needs from the logs, they are discarded. For more information on how GuardDuty uses information from other services, see GuardDuty data sources.
GuardDuty data is encrypted in transit between services.