AWS::Detective::OrganizationAdmin

Detective OrganizationAdmin

Resource schema for AWS::Detective::OrganizationAdmin

Properties

1 configurable property. 1 required. Click a row to see details.

Filter:

Property	Type	Flags
`AccountId`	`string`	RequiredCreate-only

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

Attribute	Type	Description
`GraphArn`	`string`	The Detective graph ARN

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml

AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::Detective::OrganizationAdmin

Resources:
  MyResource:
    Type: AWS::Detective::OrganizationAdmin
    Properties:
      AccountId: "my-accountid"

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

detective:EnableOrganizationAdminAccountdetective:ListOrganizationAdminAccountiam:CreateServiceLinkedRoleorganizations:RegisterDelegatedAdministratororganizations:DescribeOrganizationorganizations:EnableAWSServiceAccessorganizations:ListAccounts

read

detective:ListOrganizationAdminAccountorganizations:DescribeOrganization

update

delete

detective:DisableOrganizationAdminAccountdetective:ListOrganizationAdminAccountorganizations:DescribeOrganization

list

detective:ListOrganizationAdminAccountorganizations:DescribeOrganization

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

ServiceDetective

Properties2

Required1

TaggingNot supported

Primary IDAccountId

Supported Operations

CreateReadUpdateDeleteList

Immutable After Creation

These properties cannot be changed after the resource is created. Updating them triggers a replacement.

AccountId

Related Resources

External Links

AWS Documentation