Check if GuardDuty Lambda Protection is enabled.
guardduty_lambda_protection_enabled
GuardDuty Lambda Protection helps you identify potential security threats when an AWS Lambda function gets invoked. After you enable Lambda Protection, GuardDuty starts monitoring Lambda network activity logs associated with the Lambda functions in your AWS account.
Risk
If Lambda Protection is not enabled, GuardDuty will not be able to monitor Lambda network activity logs and may miss potential security threats.
prowler aws --checks guardduty_lambda_protection_enabled
arn:aws:guardduty:region:account-id/detector-id
Recommendation
Enable Lambda Protection in your GuardDuty detector to start monitoring Lambda Network Activity in your account.
Remediation
aws guardduty update-detector --detector-id <detector-id> --features Name=LAMBDA_NETWORK_LOGS,Status=ENABLED
Source Code
Resource Type
AwsGuardDutyDetector