Setting up CPU and memory monitoring - Amazon GuardDuty
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Setting up CPU and memory monitoring

After you enable Runtime Monitoring and assess that the coverage status of your cluster is Healthy, you can set up and view the insight metrics.

The following topics can help you evaluate how the deployed agent performs against the CPU and memory limits for the GuardDuty agent.

The following steps from the Amazon CloudWatch User Guide can help you evaluate how the deployed agent performs against the CPU and memory limits for the GuardDuty agent:

  1. Setting up Container Insights on Amazon ECS for cluster- and service-level metrics

  2. Amazon ECS Container Insights metrics

After the GuardDuty security agent gets deployed and you assess that the coverage status of your cluster is Healthy, you can set up and view the Container insight metrics.

Evaluate performance of the security agent

  1. Setting up Container Insights on Amazon EKS and Kubernetes in the Amazon CloudWatch User Guide

  2. Amazon EKS and Kubernetes Container Insights metrics in the Amazon CloudWatch User Guide

Manage performance with security agent v1.5.0 and above

With security agent v1.5.0 and above, when the insights indicate that the associated GuardDuty agent is reaching the assigned limits, you can configure specific parameters. For more information, see Configure EKS add-on parameters.