Amazon GuardDuty offers extended coverage, allowing for ongoing monitoring and profiling of Amazon EKS cluster activities.   This involves identifying any potentially harmful or suspicious behavior that could pose threats to container workloads. The EKS Protection feature within Amazon GuardDuty delivers threat detection capabilities specifically designed to safeguard Amazon EKS clusters within your AWS setup. - Source: dev.to / about 1 month ago

Bearing that in mind, AWS help customers harden their infrastructure preventing cyber incidences by mitigating threats and compromises through detection with Amazon Guard Duty. - Source: dev.to / 12 months ago

Hiya, I would advise not reinventing the wheel, here. If Amazon GuardDuty doesn't do what you need it to, you might want to look at using a third party, like Crowdstrike, for example (referring to the link you posted here). Source: over 1 year ago

Amazon GuardDuty (Security, Identity, and Compliance) Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and anomalous behavior to protect your AWS accounts, workloads, Kubernetes clusters, and data stored in Amazon Simple Storage Service (Amazon S3). The GuardDuty service monitors for activity such as unusual API calls, unauthorized deployments, and exfiltrated... - Source: dev.to / over 1 year ago

Identification: This involves detecting and identifying an incident as soon as possible, determining its scope and impact, and activating the incident response team. Using tools such as Amazon GuardDuty for threat and malicious activity detection. AWS WAF is also an effective managed service to protect web applications and environment. - Source: dev.to / over 1 year ago

It needs to be supported at your edge switching. Most vendors support it. You usually just need some kind of RADIUS server. FreeRADIUS is one of the better options. Source: about 1 year ago

You can link it back to your Windows AD account with Windows NPS, or you can use some free Radius or TACACS software package like FreeRadius, https://freeradius.org/. Source: over 1 year ago

In WorkSpaces, the only way to enable MFA is through a Radius server integrated either with an on-premises AD or an AWS Managed AD. This approach will allow you to use authentication apps like Google Authenticator to first authenticate the username and password against your Active Directory and the Radius Server will be responsible to authenticate the One-Time Password (OTP) generated by Google Authenticator. One... - Source: dev.to / over 1 year ago

I wonder why your sys admins didn't try FreeRADIUS. It ships with detailed config examples also for using LDAP for authentication. Source: about 2 years ago

We use https://freeradius.org/ as an open source solution and it integrates with our LDAP just fine. Source: about 2 years ago