GuardDuty / Client / create_custom_detection_rule_org_configuration

create_custom_detection_rule_org_configuration

GuardDuty.Client.create_custom_detection_rule_org_configuration(**kwargs)

Creates an organization-level configuration that enables a custom detection rule across your organization. This operation is available only to the delegated administrator account.

See also: AWS API Documentation

Request Syntax

response = client.create_custom_detection_rule_org_configuration(
    RuleId='string',
    Mode='LIVE'|'DRY_RUN',
    IncludeAccountIds=[
        'string',
    ],
    ExcludeAccountIds=[
        'string',
    ],
    ClientToken='string'
)
Parameters:

  • RuleId (string) –

    [REQUIRED]

    The unique identifier for the custom detection rule.

  • Mode (string) –

    [REQUIRED]

    The execution mode of the organization configuration. Valid values: LIVE | DRY_RUN.

  • IncludeAccountIds (list) –

    The account IDs to include in the organization configuration. Mutually exclusive with ExcludeAccountIds.

    • (string) –

  • ExcludeAccountIds (list) –

    The account IDs to exclude from the organization configuration. Mutually exclusive with IncludeAccountIds.

    • (string) –

  • ClientToken (string) –

    A unique, case-sensitive identifier to ensure that the operation completes no more than one time.

    This field is autopopulated if not provided.

Return type:

dict

Returns:

Response Syntax

{}

Response Structure

  • (dict) –

Exceptions

  • GuardDuty.Client.exceptions.BadRequestException

  • GuardDuty.Client.exceptions.InternalServerErrorException

  • GuardDuty.Client.exceptions.AccessDeniedException

  • GuardDuty.Client.exceptions.ResourceNotFoundException

  • GuardDuty.Client.exceptions.ConflictException