A service that helps you analyze, investigate, and identify the root cause of security findings using data from GuardDuty, CloudTrail, and VPC Flow Logs. It is not used to create firewalls or control network traffic.