AWS – Amazon Detective enhances IP Address Analytics

Amazon Detective now provides enhanced IP address analytics enabling faster security investigations. With this new capability you can answer questions about a specific IP address such as “how long has this IP address been interacting with the resources in my accounts”, “which of my EC2 instances did this IP address communicate with?”, “What were the data volumes exchanged with this IP address and which ports did the communication occur on?”, or “Which users and roles invoked API operations from this IP address?”. By providing answers to questions such as these, Detective empowers security analysts to quickly determine IP address behavior and diagnose security incidents.

Read More for the details.