logo

Detecting and preventing crypto mining in your AWS environment

ID: 5646fc27-9a49-5fb8-8518-183deae07e2a

STIX ID: report--5646fc27-9a49-5fb8-8518-183deae07e2a

Feed Name: AWS Security Blog

Date Published: 2026-05-13

Date Updated: 2026-05-13

Author: Jason Palmer

...
...

#### Executive summary — This AWS article explains how Amazon GuardDuty and related AWS services can detect and mitigate unauthorized cryptocurrency mining in AWS environments, outlining common indicators (high CPU/GPU usage, suspicious network patterns, known mining ports), GuardDuty detection methods (VPC Flow Logs, CloudTrail, Runtime Monitoring), recommended controls (CloudWatch alerts, Systems Manager, Network Firewall, IAM best practices), and the AWS approval process for legitimate mining operations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.