Amazon GuardDuty Now Protects Amazon Elastic Kubernetes Service Clusters

I was very surprised to receive a few emails late on a Friday that a new feature was auto-enabled on AWS accounts that have never run Kubernetes, and informing me that I'll start paying for a service in 30 days unless I disable it.