---
title: GuardDuty Malware Protection Plan
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > GuardDuty Malware Protection Plan
---

# GuardDuty Malware Protection Plan

This table represents the GuardDuty Malware Protection Plan resource from Amazon Web Services.

```
aws.guardduty_malwareprotectionplan
```

## Fields

| Title              | ID   | Type       | Data Type                                                                                                                                                                        | Description |
| ------------------ | ---- | ---------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| _key               | core | string     |
| account_id         | core | string     |
| actions            | core | json       | Information about whether the tags will be added to the S3 object after scanning.                                                                                                |
| arn                | core | string     | Amazon Resource Name (ARN) of the protected resource.                                                                                                                            |
| created_at         | core | timestamp  | The timestamp when the Malware Protection plan resource was created.                                                                                                             |
| protected_resource | core | json       | Information about the protected resource that is associated with the created Malware Protection plan. Presently, <code>S3Bucket</code> is the only supported protected resource. |
| role               | core | string     | Amazon Resource Name (ARN) of the IAM role that includes the permissions to scan and add tags to the associated protected resource.                                              |
| status             | core | string     | Malware Protection plan status.                                                                                                                                                  |
| status_reasons     | core | json       | Information about the issue code and message associated to the status of your Malware Protection plan.                                                                           |
| tags               | core | hstore_csv |