aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

[AWS::GuardDuty::Detector] - [Enhancement] - Allow UpdateOrganizationConfiguration properties in the CloudFormation resource

Open
#2,212 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::GuardDuty::Detector

### Resource name

AWS::GuardDuty::Detector

### Description

Add support to manage GuardDuty features on organization-level and enable all features mentioned in the command line. This is currently possible through [CLI](https://docs.aws.amazon.com/cli/latest/reference/guardduty/update-organization-configuration.html) and [API](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateOrganizationConfiguration.html).

Successful command looks like:
```
aws guardduty update-organization-configuration --detector-id --auto-enable-organization-members=ALL

aws guardduty update-organization-configuration --detector-id --auto-enable --features '[{"Name": "LAMBDA_NETWORK_LOGS", "AutoEnable": "ALL"}]'
```

**Related Issue**
https://github.com/aws-cloudformation/cloudformation-coverage-roadmap/issues/2173

**Reference**
https://docs.aws.amazon.com/guardduty/latest/APIReference/API_OrganizationFeatureConfiguration.html
https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateOrganizationConfiguration.html

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with the AWS::GuardDuty::Detector resource and the referenced UpdateOrganizationConfiguration CLI and API documentation, including issue 2173. Determine the CloudFormation properties needed for organization-level GuardDuty features, then verify that the resource can manage the auto-enable organization members and feature settings shown in the examples.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.