Installing ec2 Guardduty security agent

Question

I am trying to install the Guardduty security agent on my AWS Linux 2 ami.

I following the instructions on https://docs.aws.amazon.com/guardduty/latest/ug/managing-gdu-agent-ec2-manually.html#installing-gdu-security-agent-ec2-manually `Method 2 - By using RPM installation scripts`

However, it comes up as kernal >= 5.4.0 is needed by `amzon-guardduty-agent-1.0.0-x86_64`

Is there any other version of the security agent I could install to get it to work with AWS Linux 2?

Answer

You may consider using another ami image like this:  **Amazon Linux 2 AMI (HVM) - Kernel 5.10, SSD Volume Type (ami-0fa1ca9559f1892ec)**

Here you can check the requirements: https://docs.aws.amazon.com/guardduty/latest/ug/prereq-runtime-monitoring-ec2-support.html

If upgrading the kernel is not feasible in your case, you may want to explore other security solutions that are compatible with your current kernel version.

Installing ec2 Guardduty security agent

Contenus pertinents