How do I enable Amazon GuardDuty Malware Production for Amazon S3 via Cloudformation or CDK

Question

Good afternoon,

I note that the recently released Amazon GuardDuty feature of Malware Production for Amazon S3 can be enabled via the Console (https://docs.aws.amazon.com/guardduty/latest/ug/enable-malware-protection-s3-bucket.html).  It also possible to enable this feature via Cloudformation or CDK?

Thxs in advance,
Adrian

iBehr · Answer

Here is a link to the CloudFormation documentation for GuardDuty Malware Protection

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-malwareprotectionplan.html

```json
{
  "Type" : "AWS::GuardDuty::MalwareProtectionPlan",
  "Properties" : {
      "Actions" : CFNActions,
      "ProtectedResource" : CFNProtectedResource,
      "Role" : String,
      "Tags" : [ TagItem, ... ]
    }
}
```

In your case, you are wanting to [protect S3](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfnprotectedresource.html) so the code would look like the following to specify the S3 Bucket.

```json
{
  "Type" : "AWS::GuardDuty::MalwareProtectionPlan",
  "Properties" : {
      "Actions" : CFNActions,
      "ProtectedResource" : {
          "S3Bucket" : S3Bucket
      },
      "Role" : String,
      "Tags" : [ TagItem, ... ]
    }
}
```

Hope this helps!

How do I enable Amazon GuardDuty Malware Production for Amazon S3 via Cloudformation or CDK

Relevant content