aws-samples / aws-control-tower-guardduty-enabler

Apache License 2.0
41 stars 26 forks source link

Enable GuardDuty in all regions for all accounts via cli #24

Closed andrewvdm closed 1 year ago

andrewvdm commented 1 year ago

Trello card

Summary

Using the GuardDuty service integration with AWS Organizations member accounts can be automatically added to GuardDuty when added to AWS Organizations. Previously a Lambda function was required to enable GuardDuty in all the active regions for all the member accounts. This function also had to run on a schedule to check for any new accounts so that they could also be added.

Description of changes:

Shell script to check and enable GuarDuty in all active regions and to set auto-enable on GuardDuty in the security account to active using the available AWS CLI commands.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.