Amazon Web Services → Microsoft Azure
Azure equivalent of Amazon GuardDuty
Amazon GuardDuty maps to the workload protection plans in Microsoft Defender for Cloud (Defender for Servers, Containers, Storage, Databases, Resource Manager, and others).
About Amazon GuardDuty
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | Threat detection from CloudTrail, VPC Flow Logs, and DNS logs, plus protection plans for S3, EKS, runtime (EC2, ECS, EKS), malware, RDS logins, and Lambda. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| Managed threat detection | Microsoft Defender for Cloud (workload protection) | Partial match |
Threat detection, posture & security operations(1)
Managed threat detection Partial match
Amazon GuardDuty maps to the workload protection plans in Microsoft Defender for Cloud (Defender for Servers, Containers, Storage, Databases, Resource Manager, and others).
- Packaging. GuardDuty is one service with foundational detection (CloudTrail, VPC Flow Logs, DNS logs) plus optional protection plans. Defender for Cloud enables a separate paid plan per resource type, with Defender for Endpoint integrated in Defender for Servers.
- Multicloud. Defender for Cloud can also protect AWS and GCP resources through connectors. GuardDuty covers AWS only.
- Alerts go to Security Hub (AWS) or Defender XDR and Sentinel (Microsoft).