diff --git a/internal/service/guardduty/detector.go b/internal/service/guardduty/detector.go
index b3728914177f..7d396bc0ad2d 100644
--- a/internal/service/guardduty/detector.go
+++ b/internal/service/guardduty/detector.go
@@ -304,7 +304,9 @@ func expandDataSourceConfigurations(tfMap map[string]interface{}) *guardduty.Dat
 	if v, ok := tfMap["kubernetes"].([]interface{}); ok && len(v) > 0 {
 		apiObject.Kubernetes = expandKubernetesConfiguration(v[0].(map[string]interface{}))
 	}
-
+	if v, ok := tfMap["malware_protection"].([]interface{}); ok && len(v) > 0 {
+		apiObject.MalwareProtection = expandMalwareProtectionConfiguration(v[0].(map[string]interface{}))
+	}
 	return apiObject
 }