How To Manage Amazon GuardDuty in AWS Organizations Using Terraform
About the use case Amazon GuardDuty is a managed threat detection service that continuously monitors AWS accounts and workloads for malicious or unauthorized activity using machine learning, anomaly detection, and integrated threat intelligence. GuardDuty supports managing multiple accounts with AWS Organizations via the delegated administrator feature, with which you designate an AWS account in the organization to centrally manage GuardDuty for all members. This is great for managing a multi-account landing zone by centralizing management of GuardDuty settings in a consistent manner. Since it is increasingly common to establish an AWS landing zone using AWS Control Tower , we will use the standard account structure in a Control Tower landing zone to demonstrate how to configure GuardDuty in Terraform: The relevant accounts for our use case in the landing zone are: The Management account for the organization where AWS Orga...