Amazon GuardDuty announced an expansion of its RDS Protection feature. The new add‑on watches query patterns in Aurora PostgreSQL and Amazon RDS for PostgreSQL. It uses machine‑learning‑based anomaly detection and threat intelligence, and it works without extra agents or config changes. Customers can turn it on with one click in the GuardDuty console or via API, and a 30‑day free trial is offered per account per Region.
Why it matters
It lets organizations spot hidden data‑theft or wipe attempts even when attackers have legitimate credentials.