---
title: GuardDuty Filter
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > GuardDuty Filter
---

# GuardDuty Filter

GuardDuty Filter in AWS is a resource that lets you define and manage filtering criteria for findings generated by Amazon GuardDuty. Filters allow you to narrow down security findings based on attributes such as severity, type, or resource details, making it easier to focus on the most relevant threats.

```
aws.guardduty_filter
```

## Fields

| Title            | ID   | Type       | Data Type                                                                                                                                      | Description |
| ---------------- | ---- | ---------- | ---------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| _key             | core | string     |
| account_id       | core | string     |
| action           | core | string     | Specifies the action that is to be applied to the findings that match the filter.                                                              |
| description      | core | string     | The description of the filter.                                                                                                                 |
| finding_criteria | core | json       | Represents the criteria to be used in the filter for querying findings.                                                                        |
| name             | core | string     | The name of the filter.                                                                                                                        |
| rank             | core | int64      | Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings. |
| tags             | core | hstore_csv |