The Cloud Instance resource has methods to retrieve information about AWS EC2 instances in a CloudGuard user's cloud accounts, and to attach security groups to them.
There is also a method to retrieve AWS GuardDuty findings for the instance.
Security Groups are created and managed using the Cloud Security Group resource. Security Groups can only be attached to instances in managed cloud accounts.