organization_configurations
Creates, updates, deletes, gets or lists an organization_configurations resource.
Overview
| Name | organization_configurations |
| Type | Resource |
| Id | aws.detective.organization_configurations |
Fields
The following fields are returned by SELECT queries:
- describe_organization_configuration
| Name | Datatype | Description |
|---|---|---|
auto_enable | boolean | Indicates whether to automatically enable new organization accounts as member accounts in the organization behavior graph. |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
describe_organization_configuration | select | region | Returns information about the configuration for the organization behavior graph. Currently indicates whether to automatically enable new organization accounts as member accounts. Can only be called by the Detective administrator account for the organization. | |
update_organization_configuration | update | region, GraphArn | Updates the configuration for the Organizations integration in the current Region. Can only be called by the Detective administrator account for the organization. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
region | string | AWS region (default: us-east-1) |
SELECT examples
- describe_organization_configuration
Returns information about the configuration for the organization behavior graph. Currently indicates whether to automatically enable new organization accounts as member accounts. Can only be called by the Detective administrator account for the organization.
SELECT
auto_enable
FROM aws.detective.organization_configurations
WHERE region = '{{ region }}' -- required
;
UPDATE examples
- update_organization_configuration
Updates the configuration for the Organizations integration in the current Region. Can only be called by the Detective administrator account for the organization.
UPDATE aws.detective.organization_configurations
SET
GraphArn = '{{ GraphArn }}',
AutoEnable = {{ AutoEnable }}
WHERE
region = '{{ region }}' --required
AND GraphArn = '{{ GraphArn }}' --required;