Using Amazon GuardDuty Malware Protection to scan uploads to Amazon S3

This article discusses using Amazon GuardDuty Malware Protection to scan uploads to Amazon S3 for malware. It provides an overview of the new malware protection feature for S3 and a solution for copying scanned S3 objects to a destination bucket.

Specifically, the article covers:

• Feature overview of GuardDuty Malware Protection for S3
• IAM permissions required for enabling the feature
• S3 object tagging and access control options
• Solution overview for deploying a CloudFormation template to copy scanned objects to a destination bucket
• Options for extending the solution for alternative use cases
• Conclusion highlighting the benefits of the new malware protection feature