Orchestrate automated response for Amazon GuardDuty Malware Protection for AWS Backup at scale

This technical guide addresses the security gap where infected backups can inadvertently restore malware alongside legitimate data. The post demonstrates an event-driven solution combining Amazon GuardDuty malware scanning with automated quarantine workflows using AWS Lambda triggered by EventBridge, tagging compromised recovery points and enforcing organization-wide restore restrictions through service control policies.