Suspending or stopping GuardDuty - Amazon GuardDuty
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China.

Suspending or stopping GuardDuty

You can use the GuardDuty console to suspend or stop the GuardDuty service. You don't get charged for using GuardDuty when the service is suspended.

  • All optional data sources must be disassociated from all detectors in all regions before you can suspend or stop GuardDuty.

  • All member accounts must be disassociated or deleted before you can suspend or stop GuardDuty.

  • If you suspend GuardDuty, it no longer monitors the security of your Amazon environment or generates new findings. Your existing findings remain intact and are not affected by the GuardDuty suspension. You can choose to re-enable GuardDuty later.

  • If you stop GuardDuty, your existing findings and the GuardDuty configuration are lost and can't be recovered. If you want to save your existing findings, you must export them before you stop GuardDuty.

To suspend or stop GuardDuty

  1. Open the GuardDuty console at

  2. In the navigation pane, Choose Settings.

  3. Within the Suspend GuardDuty section, choose Suspend GuardDuty or Disable GuardDuty, then confirm your action in the next panel.