Skip to main content

organization_configurations

Creates, updates, deletes, gets or lists an organization_configurations resource.

Overview

Nameorganization_configurations
TypeResource
Idaws.detective.organization_configurations

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
auto_enablebooleanIndicates whether to automatically enable new organization accounts as member accounts in the organization behavior graph.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
describe_organization_configurationselectregionReturns information about the configuration for the organization behavior graph. Currently indicates whether to automatically enable new organization accounts as member accounts. Can only be called by the Detective administrator account for the organization.
update_organization_configurationupdateregion, GraphArnUpdates the configuration for the Organizations integration in the current Region. Can only be called by the Detective administrator account for the organization.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
regionstringAWS region (default: us-east-1)

SELECT examples

Returns information about the configuration for the organization behavior graph. Currently indicates whether to automatically enable new organization accounts as member accounts. Can only be called by the Detective administrator account for the organization.

SELECT
auto_enable
FROM aws.detective.organization_configurations
WHERE region = '{{ region }}' -- required
;

UPDATE examples

Updates the configuration for the Organizations integration in the current Region. Can only be called by the Detective administrator account for the organization.

UPDATE aws.detective.organization_configurations
SET
GraphArn = '{{ GraphArn }}',
AutoEnable = {{ AutoEnable }}
WHERE
region = '{{ region }}' --required
AND GraphArn = '{{ GraphArn }}' --required;