Service Control PoliciesResource Control PoliciesDeclarative PoliciesTag, Backup & AI Opt-Out Policies
Config Rules
CloudWatch Alarms and Event Rules
CloudFormation Guard Rules
Logging & Monitoring Configurations
Backups & DR
Auto Remediation Rules
Conformance Packs
Billing and Cost Management
S3 Bucket Policies
Security Groups & NACLs
IAM Policies
VPC Endpoint Policies
VPC Security Controls
EC2 Security Controls
IAM Security Controls
S3 Security Controls
RDS Security Controls
OpenSearch/Elasticsearch Security Controls
EFS Security Controls
Route53 Security Controls
Amazon DynamoDB & DAX
ECR Security Controls
EMR Security
Lambda SecurityCloudFormation Security
CodeX Security Controls
CloudFront Security
AWS Certificate Manager (ACM) Security
Amazon GuardDuty
Amazon Inspector
AWS Security Hub
AWS Network FirewallRoute53 Resolver Security
Amazon Macie
AWS WAF & Shield
AWS Secrets Manager
AWS Systems Manager
AWS KMS
AWS SSO
Load Balancers & Auto Scaling
RDS Event Subscriptions
AWS Resource Access Manager (RAM)
Amazon ECS
Amazon EKS
Amazon API Gateway
AWS AppConfig
Amazon AppFlow
AWS App Mesh
AWS App Runner
AWS AppSync
Application Auto Scaling
Amazon Athena
AWS Batch
AWS Billing Conductor
AWS Clean Rooms
AWS SNS
AWS SQS
AWS Service Discovery
AWS Step Functions
AWS CloudTrailAWS Config
Amazon EventBridgeAWS CloudWatch
AWS Cognito
Amazon Connect
AWS Glue
AWS Data Pipeline & Data Sync
Amazon Detective
AWS DevOps Guru
Amazon DocumentDB
Amazon ElastiCache
AWS Elastic Beanstalk
Amazon FSx
Amazon MQ
Amazon PrometheusAmazon Cassandra
Amazon FinSpace
AWS Fault Injection Simulator
Amazon GameLift
AWS Global Accelerator
Amazon Grafana
AWS IoT GreenGrass
AWS IoT Services
AWS Ground Station
Amazon IVS (Interactive Live Streams)
Amazon Kinesis
AWS LakeFormation
Amazon Lookout
Amazon Managed Blockchain
AWS Media Services
AWS Managed Apache Airflow
AWS OpsWorksAWS Organizations
Amazon Personalize
Amazon QLDB
Amazon Redshift
Amazon Rekognition
AWS Resource ExplorerAWS Resource Groups
Amazon Lex & Alexa
AWS RoboMaker
Amazon SageMaker
AWS Service Catalog
Amazon SES
AWS SimSpace Weaver
AWS Support App
AWS Transfer
AWS X-Ray
AWS Amplify
AWS Appstream
AWS Audit ManagerAmazon Bedrock
AWS Cloud9
AWS CloudHSM
Amazon Neptune
Amazon QuicksightA collection of configuration templates for Amazon Detective resources as well as security controls for monitoring and protecting Amazon Detective configuration such as Config Rules, CloudWatch Alarms, EventBridge Rules, IAM policies, and more.
This template creates an AWS Detective Organization Admin resource to designate a Detective administrator account for the organization in the current region. If the account does not have Detective enabled, then this resource enables Detective for that account and creates a new behavior graph.
This template creates an invitation to join a Detective behavior graph. The administrator account can choose whether to send an email notification of the invitation to the root user email address of the AWS account. In this example, the email notification is blocked.
This template creates an invitation to join a Detective behavior graph. The administrator account can choose whether to send an email notification of the invitation to the root user email address of the AWS account.
This template creates an AWS Detective behavior graph. The behavior graph is created with the specified tags.
© 2026 asecurecloud. All rights reserved.
