tomwwright / littleorange

Minimalist AWS multi-account cloud leveraging CloudFormation and Lambda.
GNU General Public License v3.0
4 stars 1 forks source link

GuardDuty auto-created Detector not CloudFormation-managed #11

Open tomwwright opened 4 years ago

tomwwright commented 4 years ago

When an account is enabled as the GuardDuty Organization Admin account, a Detector resource is auto-created and cannot be removed. This means the Little Orange GuardDuty stack cannot create the Detector so its properties are not managed by CloudFormation

It may be better to roll the Detector config management into the GuardDutyOrganizationConfiguration Custom Resource to ensure it gets managed