AWS GuardDuty Runtime Monitoring: The Security Agent That Sees Inside Your Workloads

Standard GuardDuty watches network traffic. Runtime Monitoring deploys an agent that sees process execution, file access, and privilege escalation inside EC2, EKS, and ECS — here's how to enable it without blowing up your bill.