aws_guardduty_detector

Provides a resource to manage a GuardDuty detector.

NOTE: Deleting this resource is equivalent to "disabling" GuardDuty for an AWS region, which removes all existing findings. You can set the enable attribute to false to instead "suspend" monitoring and feedback reporting while keeping existing data. See the Suspending or Disabling Amazon GuardDuty documentation for more information.

Example Usage

resource "aws_guardduty_detector" "MyDetector" {
  enable = true
}

Argument Reference

The following arguments are supported:

• enable - (Optional) Enable monitoring and feedback reporting. Setting to false is equivalent to "suspending" GuardDuty. Defaults to true.

Attributes Reference

In addition to all arguments above, the following attributes are exported:

• id - The ID of the GuardDuty detector
• account_id - The AWS account ID of the GuardDuty detector

Import

GuardDuty detectors can be imported using the detector ID, e.g.

$ terraform import aws_guardduty_detector.MyDetector 00b00fd5aecc0ab60a708659477e9617