AWS Detective
Amazon Detective uses ML and graph theory to help conduct faster security investigations across AWS workloads.
What is Detective? (Simple Explanation)
Detective is an AWS service in the Security category. Amazon Detective uses ML and graph theory to help conduct faster security investigations across AWS workloads.
When Would You Use This?
- Security incident investigation
- Root cause analysis of GuardDuty findings
- IAM role behavior analysis
- Lateral movement detection
Who Uses Detective?
From startups to enterprises, Detective powers:
What Makes Detective Powerful
Services That Work with Detective
Detective is rarely used alone. It's typically combined with:
Compliance & Security
How AWS Detective fits into major compliance standards:
Detective configuration is audited by CIS Benchmarks 1.5–3.0 for secure cloud defaults.
Detective access controls, encryption, and audit logging map to NIST 800-53 AC, SC, and AU control families.
Detective encryption, access control, and logging support PCI DSS for cardholder data environments.
Detective security, availability, and confidentiality controls evaluated under SOC 2 Trust Services Criteria.
Detective configuration and monitoring controls map to ISO 27001 Annex A information security management.
Ready to secure your Detective configuration?
Pavora continuously monitors your AWS Detective for misconfigurations, compliance violations, and security risks.