Amazon Detective enhances VPC flow visibility
Amazon Detective now enables you to interactively examine your Amazon Virtual Private Cloud (VPC) network flows. This new capability enables you to answer questions such as “what port or network service was in use at that time?”, “were any large data transfers involved?”, “was the traffic allowed by my Security Groups?”. These details help security analysts investigate Amazon GuardDuty findings, examine unexpected network behavior, and identify other AWS resources that might be affected by a potential security issue.
Source:: Amazon AWS