Detective PNG and SVG Icon
Amazon Detective helps you investigate potential security issues by analyzing and visualizing security data from multiple AWS sources like GuardDuty and CloudTrail.
Last Modified: August 29, 2025
16px
32px
48px
64px
Details
Key Features
- Analyzes security events to identify root causes.
- Uses machine learning for threat investigation.
- Integrates with GuardDuty and Security Hub.
- Provides visualizations for faster analysis.
Common Use Cases
- Investigate AWS security incidents with graph-based analysis
- Identify unusual API activity patterns
- Correlate multiple security findings into a single case
Explore More Icons
MariaDB Instance
MariaDB Instance in Amazon RDS allows you to run managed MariaDB databases with automated backups, patching, and scaling.
Simulation
AWS RoboMaker Simulation lets you test and validate robotic applications in large-scale virtual 3D environments without physical hardware.
Elemental Live
AWS Elemental Live is a real-time video and audio encoding solution that compresses live video for broadcast and streaming delivery.
QuickSight
Amazon QuickSight is a cloud-powered business intelligence (BI) service that enables you to visualize and share insights from your data with interactive dashboards.
Elastic Disaster Recovery
AWS Elastic Disaster Recovery enables fast, reliable disaster recovery of on-premises and cloud-based applications to AWS.
CloudHSM
AWS CloudHSM provides hardware security modules in the AWS Cloud to generate and use your own encryption keys with FIPS 140-2 Level 3 compliance.
Application Auto Scaling
AWS Application Auto Scaling automatically adjusts the capacity of your scalable resources to maintain performance and cost-effectiveness.
S3 on Outposts
Amazon S3 on Outposts brings object storage to on-premises environments using AWS Outposts, enabling data residency and low-latency workloads.
Account
AWS Account refers to your uniquely identified entity used to access AWS services and manage resources securely.
Security Lake
Amazon Security Lake centralizes your security data from AWS and other sources into a purpose-built data lake to facilitate security analytics and investigations.
CodeBuild
AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces deployable artifacts.
Inspector
Amazon Inspector automatically assesses applications for vulnerabilities and deviations from best practices, helping improve the security of AWS workloads.
Network Firewall
AWS Network Firewall is a managed service that deploys essential network protections for your VPC, including deep packet inspection and intrusion prevention.
Cognito
Amazon Cognito provides user authentication, authorization, and user management for web and mobile apps, with social and enterprise identity federation support.
Kinesis Data Streams
Amazon Kinesis Data Streams is a service for building real-time data streaming applications that can continuously ingest and process large volumes of data.
AppConfig
AWS AppConfig is a capability of AWS Systems Manager that enables you to manage configuration changes across applications safely and rapidly.
HealthImaging
Amazon HealthImaging is a service that stores, transforms, and analyzes medical imaging data at scale using cloud-native tools and standards.
Search Document
Amazon CloudSearch or OpenSearch Document Search refers to AWS services used to index, search, and retrieve structured and unstructured documents efficiently.
Red Hat OpenShift Service on AWS
Red Hat OpenShift Service on AWS (ROSA) is a fully managed service that enables you to run Red Hat OpenShift, a Kubernetes-based container platform, directly on AWS.
Notebook
Amazon SageMaker Notebook is a fully managed Jupyter notebook environment for developing, training, and deploying machine learning models.
IoT Button
The AWS IoT Button is a programmable, Wi-Fi-enabled device that integrates with AWS IoT Core and allows developers to test cloud-based IoT applications.
Nova
Amazon Nova refers to internal AI infrastructure or services (if announced); details may vary as it's not yet publicly defined.
Model
AWS Model refers to machine learning models created, trained, or deployed using services like Amazon SageMaker.
IAM Permissions
IAM Permissions define what actions users and roles can take on which resources, using policies attached to IAM identities or resources.