Using shared VPC with automated security agents - Amazon GuardDuty
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Using shared VPC with automated security agents

When you choose GuardDuty to manage the security agent automatically, Runtime Monitoring supports using a shared VPC for the Amazon Web Services accounts that belong to the same organization in Amazon Organizations. On your behalf, GuardDuty can set the Amazon VPC endpoint policy based on the details associated with the shared VPC for your organization.

Prior to this release, GuardDuty supported the use of shared VPCs only when you chose to manage the GuardDuty security agent manually.