Now let wrap it all, back to GuardDuty Console, you will enable Malware Protection.
role-guardduty-s3-raw
s3-raw-gd