Amazon GuardDuty adds AI Protection for AI workloads
Amazon GuardDuty now offers AI Protection, expanding threat detection to AI workloads like Amazon Bedrock and Amazon SageMaker. This new capability addresses the security gap for AI services by continuously monitoring for threats such as anomalous model invocations, cost harvesting, and prompt injection without requiring manual configuration. It analyzes CloudTrail events and integrates with Bedrock Guardrails, with findings flowing into Security Hub for a unified view and prioritized response. AI Protection is available with a 30-day free trial for existing GuardDuty customers.
- →GuardDuty AI Protection for AWS AI workloads
- →Unified threat visibility with Security Hub integration
- →Simplified enablement and availability
Features (1) ›
- GuardDuty AI Protection for AWS AI workloads
Amazon GuardDuty now includes AI Protection, extending threat detection to AI services such as Amazon Bedrock and Amazon SageMaker. This feature provides continuous monitoring for AI-specific threats, including anomalous model invocations, cost harvesting, and prompt injection attempts.
Enhancements (1) ›
- Unified threat visibility with Security Hub integration
Threat findings from GuardDuty AI Protection are integrated directly into AWS Security Hub, offering security teams a consolidated view of AI assets and associated threats for prioritized incident response. The feature analyzes CloudTrail management and data events from AWS AI services to detect suspicious activity.
Notes (1) ›
- Simplified enablement and availability
GuardDuty AI Protection can be enabled with minimal steps through the GuardDuty or Security Hub console, and centrally managed across an organization using AWS Organizations. It is available to existing GuardDuty customers and includes a 30-day free trial.
https://aws.amazon.com/about-aws/whats-new/2026/07/amazon-guardduty-ai-protection-aws/
Related releases
- AWS Security Hub adds AI inventory for organization-wide asset visibility AWS What's New ·
- SageMaker HyperPod now supports custom AMIs for Slurm clusters AWS What's New ·
- SageMaker JumpStart offers OpenAI PII detection and masking model AWS What's New ·
- SageMaker JumpStart adds Qwen3 embedding and reranking models AWS What's New ·
- Gemma-4-E2B-it model available in Amazon SageMaker JumpStart AWS What's New ·
- Voxtral-Mini-4B-Realtime available in Amazon SageMaker JumpStart AWS What's New ·