What is AWS PaidOnDemandEBSVolumeDataScanned?

Last updated: April 10, 2025

Amazon GuardDuty offers malware protection as a paid service for EBS Volumes. When enabled, Amazon will create a replica of your EBS volume which is scanned for possible malware. The charge for GuardDuty Malware Protection is based on the total and prorated GB volume of Amazon EBS data scanned each month. Note that in order to have this feature enabled, it's required that you use EBS snapshots which incur additional, separate charges beyond this distinct billing code. This feature is billed per GB per month. Note that this particular billing code is the On-Demand billing code for EBS volume protection which means it is likely being triggered manually by you or someone at your organization vs the automated GuardDuty service which would monitor on your behalf and show up as a distinct, separate billing code.