GuardDuty / Client / update_custom_detection_rule_org_configuration

update_custom_detection_rule_org_configuration

GuardDuty.Client.update_custom_detection_rule_org_configuration(**kwargs)

Updates the organization-level configuration for a custom detection rule, including the mode and include/exclude account lists.

See also: AWS API Documentation

Request Syntax

response = client.update_custom_detection_rule_org_configuration(
    RuleId='string',
    Mode='LIVE'|'DRY_RUN',
    IncludeAccountIds=[
        'string',
    ],
    ExcludeAccountIds=[
        'string',
    ]
)
Parameters:

  • RuleId (string) –

    [REQUIRED]

    The unique identifier for the custom detection rule.

  • Mode (string) –

    [REQUIRED]

    The execution mode of the organization configuration. Valid values: LIVE | DRY_RUN.

  • IncludeAccountIds (list) –

    The account IDs to include in the organization configuration. Mutually exclusive with ExcludeAccountIds.

    • (string) –

  • ExcludeAccountIds (list) –

    The account IDs to exclude from the organization configuration. Mutually exclusive with IncludeAccountIds.

    • (string) –

Return type:

dict

Returns:

Response Syntax

{}

Response Structure

  • (dict) –

Exceptions

  • GuardDuty.Client.exceptions.BadRequestException

  • GuardDuty.Client.exceptions.InternalServerErrorException

  • GuardDuty.Client.exceptions.AccessDeniedException

  • GuardDuty.Client.exceptions.ResourceNotFoundException

  • GuardDuty.Client.exceptions.ConflictException