Overview
Amazon GuardDuty is priced based on the quantity of AWS CloudTrail Events analyzed and the volume of Amazon VPC Flow Log and DNS Log data analyzed. There is no additional charge to enable these log sources for GuardDuty analysis.
AWS CloudTrail Management Event analysis – GuardDuty continuously analyzes CloudTrail management events, monitoring all access and behavior of your AWS accounts and infrastructure. CloudTrail management event analysis is charged per 1,000,000 events per month and pro-rated.
AWS CloudTrail S3 Data Event analysis – GuardDuty continuously analyzes CloudTrail S3 data events, monitoring access and activity of all your Amazon S3 buckets. CloudTrail S3 data event analysis is charged per 1,000,000 events per month and are pro-rated.
VPC Flow Log and DNS Log analysis – GuardDuty continuously analyzes VPC Flow Logs and DNS requests and responses to identify malicious, unauthorized, or unexpected behavior in your AWS accounts and workloads. Flow log and DNS log analysis is charged per Gigabyte (GB) per month. Flow log and DNS log analysis is offered with tiered volume discounts.
Free trial
Any new account to Amazon GuardDuty can try the service for 30-days at no cost in each supported region.
You will have access to the full feature set and detections during the free trial.
The GuardDuty console indicates how many days are left on the trial period and estimates how much the daily average cost for your account is based on the volume of data analyzed. This makes it easy for you to experience Amazon GuardDuty at no cost and take the guess work out of the cost of the service beyond the free trial.
Pricing by region
GuardDuty processes
- 40,000,000 management events
- 2,000 GB of VPC Flow logs
- 1,000 GB of DNS Query Logs
- 200,000,000 S3 data events
Charges =
40 x $4.00 (per 1,000,000 management events)
+ 500 x $1.00 (first 500 GB)
+ 2,000 x $0.50 (next 2,000 GB)
+ 500 x $0.25 (next 7,500 GB)
+ 200 * $0.80 (per 1,000,000 S3 data events for first 500 million)
= $1,945 per month
GuardDuty processes
- 5,000,000 management events
- 200 GB of VPC Flow logs
- 50 GB of DNS Query Logs
- 1,000,000,000 S3 data events
Charges =
5 x $4.00 (per 1,000,000 events)
+ 250 x $1.00 (first 500 GB)
+ 500 * 0.80 (per 1,000,000 S3 data events for first 500 million)
+ 500 * 0.40 (per 1,000,000 S3 data events for next 4500 million)
= $870 per month
Additional pricing resources
Easily calculate your monthly costs with AWS
Additional resources for switching to AWS
Amazon GuardDuty is a threat detection service that provides you with an accurate and easy way to continuously monitor and protect their AWS accounts and workloads.
Try Amazon GuardDuty for 30-days at no cost. You will receive full access to GuardDuty features and its detection findings during the free trial.
Get started building with Amazon GuardDuty in the AWS Console.