HOW TO USE AWS TRANSFER FAMILY AND AMAZON GUARDDUTY FOR MALWARE PROTECTION

Summary from the TLDR InfoSec newsletter

A solution post from AWS on utilizing AWS Transfer Family and GuardDuty to scan files uploaded to an SFTP server. The workflow utilizes Lambda functions with Step Functions to move uploaded files to an S3 bucket, scan them with GuardDuty, clean infected files, and then notify the user via SNS. Terraform files are provided to deploy the solution.