Amazon GuardDuty Launches AI-Powered Investigation Agent for Threat Assessments

Amazon has introduced the GuardDuty investigation agent, currently in public preview, which automates the investigation of security findings across AWS environments. This agent significantly reduces investigation time from hours to minutes by providing structured assessments, risk levels, and actionable recommendations. It is designed to help security teams manage findings more efficiently by correlating data across multiple tools. The investigation agent is available at no additional cost in 10 AWS Regions during the preview period, with limits on the number of investigations per account. The agent utilizes Cross-Region inference to process findings securely while ensuring data remains within the originating region. This development aims to enhance the security posture of organizations using AWS by streamlining threat assessment processes.

Key Points: • Amazon GuardDuty investigation agent automates threat investigations, reducing time significantly. • The agent is available for free during the public preview in 10 AWS Regions with usage limits. • It provides structured outputs, including risk levels and actionable recommendations.