GuardDuty Runtime Monitoring Now Bundled into Security Hub Threat Analytics
AWS just rolled GuardDuty Runtime Monitoring into the Security Hub Threat Analytics plan, so you'll get threat detection for container escapes, privilege escalation, and cryptomining across EC2, EKS, and ECS on Fargate without separate charges. If Security Hub is already running in your account and region, Runtime Monitoring coverage switches to unified billing—no reconfiguration needed, same detection power.
source: [aws/whats-new]