# Amazon GuardDuty Regions and endpoints
<a name="guardduty_regions"></a>

To view the Amazon Web Services Regions where Amazon GuardDuty is available, see [Amazon GuardDuty endpoints](https://docs.amazonaws.cn/general/latest/gr/guardduty.html) in the *Amazon Web Services General Reference*.

We recommend that you enable GuardDuty in all supported Amazon Web Services Regions. This enables GuardDuty to generate findings about unauthorized or unusual activity even in Regions that you are not actively using. This also allows GuardDuty to monitor Amazon CloudTrail events for the supported Amazon Web Services Regions, its ability to detect activity that involves global services is reduced.

## Region-specific feature availability
<a name="gd-regional-feature-availability"></a>

A list of regional differences to specify the availability of GuardDuty features.

**Expanded filterable fields for CreateFilter and UpdateFilter**  
The [additional filterable fields](https://docs.amazonaws.cn/guardduty/latest/ug/guardduty_filter-findings.html#filter_criteria) for suppression rules and filters are available only in the Amazon partition (`aws`). In other partitions, you can continue to use the console-supported fields.

**ListFindings and GetFindingsStatistics APIs**  
The [https://docs.amazonaws.cn/guardduty/latest/APIReference/API_GetFindingsStatistics.html](https://docs.amazonaws.cn/guardduty/latest/APIReference/API_GetFindingsStatistics.html) and [https://docs.amazonaws.cn/guardduty/latest/APIReference/API_ListFindings.html](https://docs.amazonaws.cn/guardduty/latest/APIReference/API_ListFindings.html) APIs have a temporary `consoleOnly` flag. When you use any or both of these APIs, the `consoleOnly` flag means that the API can fetch results to a maximum limit of 1000.

**Malware Protection for EC2**  
GuardDuty supports the [Malware Protection for EC2](malware-protection.md) feature in the [Amazon Dedicated Local Zones](https://www.amazonaws.cn/dedicatedlocalzones).

**RDS Protection**  
RDS Protection is not supported in Asia Pacific (Taipei) (`ap-east-2`) Region.  
RDS Protection is not supported in the Amazon Dedicated Local Zones.

**IAM finding type – [CredentialAccess:IAMUser/CompromisedCredentials](guardduty_finding-types-iam.md#credentialaccess-iam-compromisedcredentials)**  
The CredentialAccess:IAMUser/CompromisedCredentials finding type is not supported in following regions.      
[\[See the AWS documentation website for more details\]](http://docs.amazonaws.cn/en_us/guardduty/latest/ug/guardduty_regions.html)

**IAM finding type – [DefenseEvasion:IAMUser/BedrockLoggingDisabled](guardduty_finding-types-iam.md#defenseevasion-iam-bedrockloggingdisabled)**  
The DefenseEvasion:IAMUser/BedrockLoggingDisabled finding type is not supported in Asia Pacific (Hong Kong) (`ap-east-1`) Region.

**General API support**  
The following APIs in the Amazon GuardDuty API Reference may have regional differences because of the unavailability of some of the data sources or features in previously specified Amazon Web Services Regions:  
+ [https://docs.amazonaws.cn/guardduty/latest/APIReference/API_CreateDetector.html](https://docs.amazonaws.cn/guardduty/latest/APIReference/API_CreateDetector.html) 
+ [https://docs.amazonaws.cn/guardduty/latest/APIReference/API_UpdateDetector.html](https://docs.amazonaws.cn/guardduty/latest/APIReference/API_UpdateDetector.html) 
+ [https://docs.amazonaws.cn/guardduty/latest/APIReference/API_UpdateMemberDetectors.html](https://docs.amazonaws.cn/guardduty/latest/APIReference/API_UpdateMemberDetectors.html) 
+ [https://docs.amazonaws.cn/guardduty/latest/APIReference/API_UpdateOrganizationConfiguration.html](https://docs.amazonaws.cn/guardduty/latest/APIReference/API_UpdateOrganizationConfiguration.html) 
+ [https://docs.amazonaws.cn/guardduty/latest/APIReference/API_GetDetector.html](https://docs.amazonaws.cn/guardduty/latest/APIReference/API_GetDetector.html) 
+ [https://docs.amazonaws.cn/guardduty/latest/APIReference/API_GetMemberDetectors.html](https://docs.amazonaws.cn/guardduty/latest/APIReference/API_GetMemberDetectors.html) 
+ [https://docs.amazonaws.cn/guardduty/latest/APIReference/API_DescribeOrganizationConfiguration.html](https://docs.amazonaws.cn/guardduty/latest/APIReference/API_DescribeOrganizationConfiguration.html) 

**Amazon EC2 finding types – [DefenseEvasion:EC2/UnusualDoHActivity](guardduty_finding-types-ec2.md#defenseevasion-ec2-unsualdohactivity) and [DefenseEvasion:EC2/UnusualDoTActivity](guardduty_finding-types-ec2.md#defenseevasion-ec2-unusualdotactivity)**  
The following table shows the Amazon Web Services Regions where GuardDuty is available but these two Amazon EC2 finding types are not yet supported.       
[\[See the AWS documentation website for more details\]](http://docs.amazonaws.cn/en_us/guardduty/latest/ug/guardduty_regions.html)

**Amazon GovCloud (US) Regions**  
For latest information, see [Amazon GuardDuty](https://docs.amazonaws.cn/govcloud-us/latest/UserGuide/govcloud-guardduty.html) in the *Amazon GovCloud (US) User Guide*.

**China Regions**  
For latest information, see [Feature availability and implementation differences](https://docs.amazonaws.cn/en_us/aws/latest/userguide/guardduty.html#feature-diff).