Use logs for alerting

AWS natively provides alerting through security services, such as Amazon GuardDuty, AWS Security Hub CSPM, and AWS Config. You can also use custom alert generation engines for security alerts not covered by these services or for specific alerts relevant to your environment. Building these alerts and detections is covered in the section called Detection in this document.