Frequently asked questions (FAQs) - Amazon GuardDuty
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Frequently asked questions (FAQs)

Why is the coverage status for my resource Unhealthy even after enabling Runtime Monitoring, deploying the GuardDuty security agent, and meeting all the prerequisites?

If you have just deployed the GuardDuty security agent (either through automated agent configuration or manually) or followed the recommended steps to troubleshoot a coverage issue, it might take a few minutes for the coverage status to become healthy. You can either check the coverage status periodically or configure Amazon EventBridge (EventBridge) to receive a notification when the coverage status changes.

Who can view the runtime coverage status of a resource that belongs to my Amazon Web Services account?

As a member account or standalone account, you can view the coverage statistics of the resources associated with your own accounts. As a delegated GuardDuty administrator account of an organization, you can view the coverage statistics for the resources associated with your account and the member accounts that belong to your organization.