Security, Identity, and Compliance
RecognitionAmazon Detective
Security investigation service that analyzes relationships and activity around findings and affected resources.
Key points
- It helps investigate context after detection; it is not the primary threat detector or vulnerability scanner.
Best-known use cases
- Explore entities and activity related to a GuardDuty finding.
What candidates often confuse it with
- Detective investigates relationships; GuardDuty detects threats and Security Hub aggregates findings.
Key takeaway
Choose Detective for investigation context after a security finding.
Related services
- Amazon GuardDuty
- AWS Security Hub
Relevant exam tasks
- D1.2