AWS launches Amazon Detective for investigating security incidents
Service automates "burdensome" data gathering for effective security investigations


AWS has announced the general availability of Amazon Detective, the company's automated security service.
Amazon Detective works with machine learning and statistical analysis to build visualised maps of security threats in a customer's cloud. Rather than a security team compiling all the relevant data to analyse and conduct a lengthy investigation, it automatically pulls data from services like CloudTrail and customer logs.
The information is then run through AWS GuardDuty which compiles a graph that details all interactions across the customer's infrastructure. Everything is run from the Amazon Management Console and, according to AWS, in just a few clicks your IT team can have a detailed report of the problem and where it has come from.
The graph model is also continuously updated as new data becomes available from the customer's AWS resources, allowing security teams to spend less time looking through constantly changing data sources and freeing them up to work on remediation.
The service is being offered with no upfront fees but customers will pay if they need to upload data from AWS CloudTrail and other AWS services they use.
"Even when customers tell us their security teams have the tools and information to confidently detect and remediate issues, they often say they need help when it comes to understanding what caused the issues in the first place," said Dan Plastina, VP for security services at AWS.
"Gathering the information necessary to conduct effective security investigations has traditionally been a burdensome process, which can put crucial in-depth analysis out of reach for smaller organisations and strain resources for larger teams. Amazon Detective takes all of that extra work off of the customer's plate, allowing them to focus on finding the root cause of an issue and ensuring it doesn't happen again."
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
The service is available from today in Europe, the US, South America and parts of Asia, with more regions coming soon, the company confirmed.
Bobby Hellard is ITPro's Reviews Editor and has worked on CloudPro and ChannelPro since 2018. In his time at ITPro, Bobby has covered stories for all the major technology companies, such as Apple, Microsoft, Amazon and Facebook, and regularly attends industry-leading events such as AWS Re:Invent and Google Cloud Next.
Bobby mainly covers hardware reviews, but you will also recognize him as the face of many of our video reviews of laptops and smartphones.
-
AWS' $13 billion India expansion shows why South Asia is next cloud hotspot
Analysis The big three hyperscalers view India as a prime market for expansion in light of recent growth
By Ross Kelly
-
Cloud earnings show ‘slowdown’ still not out of the question
News Earnings calls from Microsoft and Google show there’s still some gas in the tank for cloud providers
By Ross Kelly
-
What is AWS EC2?
In-depth Released in 2006, the iconic cloud service offers developers secure and scalable computing capacity
By Debabrata Deb
-
AWS launches its second Top Secret region
News The new region offers multiple availability zones geographically distinct from AWS Top Secret-East
By Praharsha Anand
-
AWS wins Adidas contract to host its SAP workloads
News The sports clothing firm says the deal will help create a more sophisticated system for managing supply and demand
By Praharsha Anand
-
UK spy agencies supercharge espionage efforts with AWS data deal
News GCHQ, MI6, and MI5 will reportedly benefit from AWS' data analytics and AI features in landmark cloud deal
By Connor Jones
-
AWS to launch cloud services reseller in Australia
News AWS Australia will allow customers in the region to buy services locally for the first time
By Zach Marzouk
-
AWS to expand Trust and Safety team amid fight against harmful content
News Amazon has denied Reuters' reports of changing "policies or processes"
By Sabina Weston