Today SAP released the first trial version of SAP Enterprise Threat Detection on Amazon.
Please note that the trial do not include all SAP patterns. But you have there the SAP ETD application, a SAP HANA box, SAP Event Streaming Processor and a SAP system. It is running on SAP CAL (Cloud Appliance Library). General information on CAL are here: SAP Cloud Appliance Library (CAL)
Please note that the first version is ETD SP01. Currently SP02 is available on SMP. The team is working on a new version for Amazon.