GuardDuty > Structures > DetectionRuleOrgConfiguration

DetectionRuleOrgConfiguration¶

Structure Class¶

Contains the organization-level configuration for a custom detection rule.

created_at: datetime | None = None

The timestamp when the organization configuration was created.

exclude_account_ids: list[str] | None = None

A list of member account IDs excluded from the organization configuration. Mutually exclusive with IncludeAccountIds.

expires_at: datetime | None = None

The timestamp when the organization configuration expires.

include_account_ids: list[str] | None = None

A list of member account IDs included in the organization configuration. Mutually exclusive with ExcludeAccountIds.

mode: str | None = None

The execution mode of the organization configuration. Valid values: LIVE | DRY_RUN.

rule_id: str | None = None

The unique identifier for the custom detection rule.

status: str | None = None

The configuration status. Valid values: ACTIVE | PROCESSING | FAILED.

status_reason: str | None = None

The reason for the current configuration status.

updated_at: datetime | None = None

The timestamp when the organization configuration was last updated.