1. Sign in to the AWS Management Console: Go to https://aws.amazon.com/ and sign in to the AWS Management Console using your credentials.
2. Navigate to the GuardDuty Service: In the AWS Management Console, search for “GuardDuty” in the search bar at the top of the page and select the GuardDuty service from the search results.
3. Enable GuardDuty: If GuardDuty is not already enabled, click on the “Enable GuardDuty” button to enable the service in your AWS account.
4. Configure GuardDuty: Follow the on-screen instructions to configure GuardDuty for your account. Make sure to select the appropriate settings based on your requirements.
5. Enable Centralized Management: In the GuardDuty console, navigate to the “Settings” tab on the left-hand side menu.
6. Enable Centralized Management: In the Settings page, locate the “Enable Centralized Management” option and click on the “Edit” button next to it.
7. Enable Centralized Management: In the Edit Centralized Management Settings page, select the option to enable centralized management for GuardDuty.
8. Save Changes: Click on the “Save” button to save the changes and enable centralized management for GuardDuty.
9. Verify Centralized Management: Once the changes are saved, verify that centralized management is enabled by checking the status in the GuardDuty console.

​

1. List all regions where GuardDuty is not enabled:

aws guardduty list-detectors --region <region-name>

2. Enable GuardDuty in the desired region:

aws guardduty create-detector --enable --region <region-name>

3. Enable Centralized GuardDuty Management:
   • Open the AWS Management Console.
   • Go to the GuardDuty service.
   • Click on the “Settings” tab.
   • Enable the “Enable GuardDuty Centralized Management” option.
4. Enable AWS Shield Advanced:
   • Open the AWS Management Console.
   • Go to the AWS Shield service.
   • Click on “Activate AWS Shield Advanced”.
   • Follow the on-screen instructions to complete the activation.
5. Verify GuardDuty and AWS Shield configuration:
   • Use the following command to verify that GuardDuty is enabled in all regions:
   aws guardduty list-detectors
   
   • Use the following command to verify that AWS Shield Advanced is enabled:
   aws shield describe-attack
   

1. Import the necessary Python libraries:

import boto3

2. Connect to AWS using the Boto3 library:

client = boto3.client('shield')

3. Disable GuardDuty Centralized Enablement:

response = client.update_subscription(
    AutoRenew=True,
    Enabled=False
)

4. Verify that GuardDuty Centralized Enablement has been successfully disabled:

if response['ResponseMetadata']['HTTPStatusCode'] == 200:
    print("GuardDuty Centralized Enablement has been successfully disabled.")
else:
    print("Failed to disable GuardDuty Centralized Enablement.")