Suspending or disabling GuardDuty - Amazon GuardDuty
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Suspending or disabling GuardDuty

You can use the GuardDuty console to suspend or disable the GuardDuty service. You don't get charged for using GuardDuty when the service is suspended.

  • All member accounts must be disassociated or deleted before you can suspend or disable GuardDuty.

  • If you suspend GuardDuty, it no longer monitors the security of your Amazon environment or generates new findings. Your existing findings remain intact and are not affected by the GuardDuty suspension. You can choose to re-enable GuardDuty later.

  • When you disable GuardDuty in an account, it will be disabled only for the currently selected Amazon Web Services Region. If you want to completely disable GuardDuty, you must disable it in each Region where it is enabled.

  • If you disable GuardDuty, your existing findings and the GuardDuty configuration are lost and can't be recovered. If you want to save your existing findings, you must export them before you confirm to disable GuardDuty. For information on how to export findings, see Exporting findings.

To suspend or disable GuardDuty

  1. Open the GuardDuty console at https://console.amazonaws.cn/guardduty/.

  2. In the navigation pane, choose Settings.

  3. In the Suspend GuardDuty section, choose Suspend GuardDuty or Disable GuardDuty, then Confirm your action.

To re-enable GuardDuty after suspending

  1. Open the GuardDuty console at https://console.amazonaws.cn/guardduty/.

  2. In the navigation pane, choose Settings.

  3. Choose Re-enable GuardDuty.