The pricing in Malware Protection for S3 works differently than other protection plans in GuardDuty. While most of the GuardDuty protection plans follow a 30-day short term free trial, Malware Protection for S3 follows 12 months Free Tier plan in AWS. For information about GuardDuty pricing, see Pricing in GuardDuty.
The following list provides the pricing costs associated with using Malware Protection for S3.
- Free Tier plan (scanning cost)
-
Each AWS account gets a 12-month Free Tier that includes usage up to a specific limit per month for each Region. If your usage goes beyond the specified limit, you will start incurring the usage cost for the exceeded limit. For information about the specified limits and a pricing example, see GuardDuty protection plans pricing
. -
All existing AWS accounts are eligible to use the 12-month Free Tier for this feature that starts from June 11, 2024 and ends on June 11, 2025. This extended 12-month Free Tier for your account applies to using Malware Protection for S3, and no other AWS service or another GuardDuty feature.
If an existing AWS account starts using Malware Protection for S3 after June 11, 2025 or after the 12-month Free Tier of the account ends, then you will start incurring the associated usage cost.
-
If you have a new AWS account and your 12-month Free Tier starts after the general availability (June 11, 2024) of Malware Protection for S3, then your 12-month Free Tier period for this feature will be the same as the 12-month Free Tier period for your account.
For information about the usage cost after enabling Malware Protection for S3, see Reviewing usage cost for Malware Protection for S3.
-
- S3 Object Tagging usage cost
-
When you enable Malware Protection for S3, it is optional to enable tagging for your scanned S3 objects. When you choose to enable S3 Object Tagging, there is an associated usage cost. For more information about the costs, see Management & insights tab
on the Amazon S3 pricing page. S3 Object Tagging usage cost is not included in the Free Tier plan.
- Amazon S3 APIs - GET and PUT usage cost
-
You will incur usage cost when GuardDuty runs the Amazon S3 APIs based on the IAM role. For example, after assuming the IAM role, GuardDuty runs the
PutObjectAPI to add the test object to your selected bucket. This helps GuardDuty assess the enabled status of the feature.For information about pricing of S3 API calls in your AWS Region, see Requests & data retrievals under the Storage & requests tab
on the Amazon S3 pricing page.
