Checks that AWS GuardDuty is enabled for threat detection.Documentation Index
Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
Use this file to discover all available pages before exploring further.
Why This Matters
Unresolved security findings indicate active or potential threats in your environment. Threat detection services identify compromised credentials, unusual API activity, and policy violations. Leaving findings unresolved extends your exposure window and violates incident response requirements in SOC 2 (CC7.3) and ISO 27001 (A.16.1).What DSALTA Checks
DSALTA connects to your Amazon Web Services (AWS) environment using read-only API access and evaluates this configuration on every sync cycle. The test result appears in your Data Library → Tests dashboard:- Passing — The configuration meets requirements. No action needed.
- Failing — The configuration does not meet requirements. Follow the remediation steps below.
- Not configured — The integration is connected but the required service or feature has not been set up yet.
How to Fix
If this test is failing, follow these steps to remediate:- Navigate to your security findings dashboard in Amazon Web Services (AWS).
- Review each open finding or incident.
- For each finding, take the recommended remediation action (e.g., rotate credentials, patch vulnerability, restrict access).
- Update the finding status to Resolved or Closed in the source system.
- Document the resolution, including what action was taken and by whom.
- DSALTA monitors the status of findings — once all findings are resolved and closed in the source, DSALTA will update the test status to Passing.
Frequently Asked Questions
How often does this test run?
How often does this test run?
This test runs automatically every 24 hours when the Amazon Web Services (AWS) integration is connected. You can trigger a manual sync at any time from the integration settings page.
What happens if this test fails?
What happens if this test fails?
A failing test generates an alert in your DSALTA dashboard. The assigned responsible role receives a notification. Remediate the issue before it affects your compliance posture.
Can I exclude this test?
Can I exclude this test?
Yes. If this test does not apply to your environment, you can mark it as Not Applicable with a justification. This exclusion is documented for auditors.
Does DSALTA modify my Amazon Web Services (AWS) configuration?
Does DSALTA modify my Amazon Web Services (AWS) configuration?
No. DSALTA uses read-only API access and never modifies, creates, or deletes resources in your environment. Remediation actions must be performed by your team directly in Amazon Web Services (AWS).
.png?fit=max&auto=format&n=tsMQJyneJ1xquFUo&q=85&s=4d401cc03b547d99b6f75a6bd170c334)