Monitoring of AWS GuardDuty for Unauthorized Access

VMware Information Security Operations has recently started the monitoring of AWS GuardDuty for AWS.

VMware Information Security Operations has recently started the monitoring of AWS GuardDuty for AWS AccountID-888520879783 and opened SOC#194362 to track the issue.

• Details: The anonymous user system:anonymous was granted API permissions on the EKS cluster tags-test. This enables unauthenticated access to the permitted APIs. If this behavior is not expected, it may indicate a configuration mistake or that your credentials are compromised.