Since test events and sample findings can update the ip_blocklist with sample IP addresses, it is highly recommended to clean up the ip_blocklist for production use. This cleanup step removes the ip_blocklist from the S3 bucket and clears the DynamoDB table.
- Delete all records from the DynamoDB table. In this example, the DynamoDB table is my-aws-lambda-guardduty-db.
- Delete the ip_blocklist file in the my-aws-lambda-guardduty bucket.