Regions and endpoints - Amazon GuardDuty
Region-specific feature availability
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Regions and endpoints

To view the Amazon Web Services Regions where Amazon GuardDuty is available, see Amazon GuardDuty endpoints in the Amazon Web Services General Reference.

We recommend that you enable GuardDuty in all supported Amazon Web Services Regions. This enables GuardDuty to generate findings about unauthorized or unusual activity even in Regions that you are not actively using. This also allows GuardDuty to monitor Amazon CloudTrail events for the supported Amazon Web Services Regions, its ability to detect activity that involves global services is reduced.

Region-specific feature availability

A list of regional differences to specify the availability of GuardDuty features.

ListFindings and GetFindingsStatistics APIs

The GetFindingsStatistics and ListFindings APIs have a temporary consoleOnly flag. When you use any or both of these APIs, the consoleOnly flag means that the API can fetch results to a maximum limit of 1000.

GuardDuty features with Region disparity
GuardDuty Malware Protection for EC2

GuardDuty supports the Malware Protection for EC2 feature in the Amazon Dedicated Local Zones.

General API support

The following APIs in the Amazon GuardDuty API Reference may have regional differences because of the unavailability of some of the data sources or features in previously specified Amazon Web Services Regions:

Amazon EC2 finding types – DefenseEvasion:EC2/UnusualDoHActivity and DefenseEvasion:EC2/UnusualDoTActivity

The following table shows the Amazon Web Services Regions where GuardDuty is available but these two Amazon EC2 finding types are not yet supported.

Amazon Web Services Region

Region code

Asia Pacific (Seoul)

ap-northeast-2

Asia Pacific (Osaka)

ap-northeast-3

Asia Pacific (Jakarta)

ap-southeast-3
Amazon GovCloud (US) Regions

For latest information, see Amazon GuardDuty in the Amazon GovCloud (US) User Guide.

China Regions

For latest information, see Feature availability and implementation differences.