Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following foundational
data sources - VPC flow logs, Amazon Web Services CloudTrail management event logs, CloudTrail S3 data event logs,
EKS audit logs, DNS logs, Amazon EBS volume data, runtime activity belonging to container workloads, such as Amazon
EKS, Amazon ECS (including Amazon Web Services Fargate), and Amazon EC2 instances.