Pricing for Malware Protection for S3 - Amazon GuardDuty
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Pricing for Malware Protection for S3

Free Tier plan (scanning cost)

Each Amazon Web Services account gets a 12-month Free Tier that includes usage up to a specific limit per month for each Region. If your usage goes beyond the specified limit, you will start incurring the usage cost for the exceeded limit. For information about the specified limits and a pricing example, see GuardDuty protection plans pricing.

  • All existing Amazon Web Services accounts are eligible to use the 12-month Free Tier for this feature that starts from June 11, 2024 and ends on June 11, 2025. This extended 12-month Free Tier for your account applies to using Malware Protection for S3, and no other Amazon Web Service or another GuardDuty feature.

    If an existing Amazon Web Services account starts using Malware Protection for S3 after June 11, 2025 or after the 12-month Free Tier of the account ends, then you will start incurring the associated usage cost.

  • If you have a new Amazon Web Services account and your 12-month Free Tier starts after the general availability (June 11, 2024) of Malware Protection for S3, then your 12-month Free Tier period for this feature will be the same as the 12-month Free Tier period for your account.

For information about the usage cost after enabling Malware Protection for S3, see Viewing usage and cost for Malware Protection for S3.

S3 Object Tagging usage cost

When you enable Malware Protection for S3, it is optional to enable tagging for your scanned S3 objects. When you choose to enable S3 Object Tagging, there is an associated usage cost. For more information about the costs, see Management & insights tab on the Amazon S3 pricing page.

S3 Object Tagging usage cost is not included in the Free Tier plan.

Amazon S3 APIs - GET and PUT usage cost

You will incur usage cost when GuardDuty runs the Amazon S3 APIs based on the IAM PassRole. For example, after assuming the IAM PassRole, GuardDuty runs the PutObject API to add the test object to your selected bucket. This helps GuardDuty assess the enabled status of the feature.

For information about pricing of S3 API calls in your Amazon Web Services Region, see Requests & data retrievals under the Storage & requests tab on the Amazon S3 pricing page.