What This Tool Does
Real examples of how the connector helps your AI agent take action; like sending messages, updating records, or syncing data across tools.
Real-Time Lookup
Instantly retrieve GuardDuty threat findings, severity levels, or resource impacts.
Example
"Get all high-severity findings from the last 24 hours."
Memory Recall
Access GuardDuty findings history to track security trends.
Example
“Get all GuardDuty alerts flagged as ‘medium’ risk in Q2.”
Instant Reaction
Notify SOC when new threats are found by AWS GuardDuty.
Example
"Alert when GuardDuty detects EC2 instance port scan activity."
Autonomous Routine
Review threat findings and patterns weekly.
Example
"Generate incident summary for GuardDuty every Friday."
Agent-Initiated Action
Isolate resource or trigger incident response.
Example
"Auto-quarantine EC2 with high severity finding."
Connect with Apps
See which platforms this connector is commonly used with to power cross-tool automation.
AWS Inspector
Pass CVE findings to GuardDuty
Slack
Alert security team when critical is found
CloudWatch
Monitor service health
Try It with Your Agent
Example Prompt:
"When Inspector finds a critical CVE, alert GuardDuty and send findings to Slack."
How to Set It Up
Quick guide to connect, authorize, and start using the tool in your Fastn UCL workspace.
1
Connect AWS GuardDuty in Fastn UCL: Navigate to the Connectors section and select AWS GuardDuty, then click Connect.
2
Authenticate with your AWS credentials and enable threat detection access.
3
Enable “get_findings” and “list_monitors” in the Actions tab.
4
Use the AI Agent to check threat alerts or monitor coverage by issuing relevant prompts.
Why Use This Tool
Understand what this connector unlocks: speed, automation, data access, or real-time actions.
