Since test events and sample findings can update the ip_blocklist with sample IP addresses, it is highly recommended to clean up the ip_blocklist for production use. Note this clean up step will remove the ip_blocklist from the S3 bucket and clear the DynamoDB table.
- Delete all records from the DynamoDB table. i.e. my-aws-lambda-guardduty-db.
- Delete the ip_blocklist file in the my-aws-lambda-guardduty bucket.