GuardDuty Support

[rehanvdm]

Investigate further.

• Malware Protection EC2/S3
  • EC2 Exclude tag Scan = false
  • S3 must be per bucket and path, can not select buckets dynamically per

Should be more than the malware scans, but start with the Malware scan for S3 first, might need some custom solution to find buckets with tags and then add them dynamically with a Lambda