Amazon GuardDuty is a security service offered by Amazon that takes VPC logs, CloudTrail logs, and DNS logs and then analyzes that data using ML plus third party data to create an Eventbrige event which can then trigger and SNS topic or Lambda function to respond accordingly. GuardDuty can even be used for cryptocurrency based attacks.
On an unrelated note, this is my 200th post on this site! I just want to thank anyone who has taken the time to visit and read here and look forward to number 300!