Malware Protection quotas - Amazon GuardDuty
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China.

Malware Protection quotas

Malware Protection has the following default availability of varied resources that the feature uses.

Scope Default Comments

Extraction and analysis of data in compressed or archived file

5

The maximum number of nested levels allowed in an archived file.

Number of threats

32

The maximum number of threats that you can view in the findings panel.

EBS volumes per scan per instance

11

The maximum number of EBS volumes that GuardDuty can scan per EC2 instance. If there are more than 11 EBS volumes that need to be scanned, GuardDuty Malware Protection sorts the deviceName alphabetically, and selects the first 11 EBS volumes.

Supported encryption types

Unencrypted and encrypted with Customer managed keys.

Malware Protection supports EBS volumes that are both unencrypted and encrypted with Customer managed keys. Malware Protection doesn't support EBS volumes encrypted with EBS managed key.

EBS volume size

1024 GB

The maximum EBS volume size in GB that GuardDuty Malware Protection can scan.

Supported file system types

GuardDuty Malware Protection can scan the following file system types:

  • New Technology File System (NTFS)

  • X File System (XFS)

  • Second extended (ext2) File System

  • Fourth extended (ext4) File System

  • File Allocation Table (FAT) File System

  • Virtual File Allocation Table (VFAT) File System

N/A.

Scan options tags

50

The maximum number of resource tags that you can add to customize your malware scan options setting. For more information, see Scan options.

Finding retention period

90

The maximum number of days that GuardDuty retains a finding. For the latest information, see Quotas for Amazon GuardDuty.

Malware scan retention period

90

The maximum number of days that GuardDuty Malware Protection retains the history of a scan. For more information on viewing recent malware scans, see Monitoring scan statuses and results in GuardDuty Malware Protection.