Hey Peter, there are many advantages of using Guard duty but the most important ones that make it special are the following:
- There is no risk of performance or availability impacts in your resources as it works independently
- All data consumed by GuardDuty is analyzed in realtime and discarded
- If you wish to stop the service, you can just suspend it by disabling the service in general settings. This will not delete the current findings