AnomalyUnusual - Amazon GuardDuty
This documentation is a draft for private preview for regions in the AWS European Sovereign Cloud. Documentation content will continue to evolve. Published: January 9, 2026.

AnomalyUnusual

Contains information about the behavior of the anomaly that is new to GuardDuty.

Contents

behavior

The behavior of the anomalous activity that caused GuardDuty to generate the finding.

Type: String to string to AnomalyObject object map map

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: