Amazon Gaurd Duty offers threat detection that enables you to continuously protect and monitor your aws account and other workloads. 
Reasons why it should be used:
- Enabling Gaurd Duty is super simple
 
- Automatically analyze the logs of network and account activity to detect suspicions
 
- It intelligently detects threats
 
- Review the detailed findings and you can trigger the lambda function to automate the prevention.