graph

Gets an individual graph resource

Overview

Name	graph
Type	Resource
Description	graph
Id	awscc.detective.graph

Fields

Name	Datatype	Description
arn	string	The Detective graph ARN
tags	array
auto_enable_members	boolean	Indicates whether to automatically enable new organization accounts as member accounts in the organization behavior graph.
region	string	AWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
arn,
tags,
auto_enable_members
FROM awscc.detective.graph
WHERE data__Identifier = '<Arn>';

Permissions

To operate on the graph resource, the following permissions are required:

Update

detective:UntagResource,
detective:TagResource,
detective:ListTagsForResource,
detective:UpdateOrganizationConfiguration,
organizations:DescribeOrganization

Read

detective:ListGraphs,
detective:ListTagsForResource,
detective:DescribeOrganizationConfiguration,
organizations:DescribeOrganization

Delete

detective:DeleteGraph