Retrieves an Amazon GuardDuty detector specified by the detector ID.

​
Basic Parameters

ParameterDescription
AWS Region(s)Enter the desired AWS Region(s).

To execute the action in multiple regions, provide a comma-separated list.
For example: us-east-1,eu-west-2.

If you wish to run the action in all available regions, use the asterisk symbol (*) instead.
Detector IDThe unique ID of the detector that you want to get.

​
Advanced Parameters

ParameterDescription
Disable XML To JSON Auto ConvertWhen checked, XML responses are not automatically converted into JSON format.

​
Example Output

{
	"status": "<string>",
	"createdAt": "2024-07-22T20:22:43",
	"updatedAt": "2021-09-14T02:42:25",
	"findingPublishingFrequency": "<string>",
	"dataSources": {
		"cloudTrail": {
			"status": "<string>",
			"updatedAt": "2021-05-24T20:53:09"
		},
		"dnsLogs": {
			"status": "<string>",
			"updatedAt": "2022-05-25T04:50:59"
		},
		"flowLogs": {
			"status": "<string>",
			"updatedAt": "2024-06-10T04:45:50"
		},
		"s3Logs": {
			"status": "<string>",
			"updatedAt": "2021-12-19T18:18:37"
		},
		"kubernetes": {
			"auditLogs": {
				"status": "<string>",
				"updatedAt": "2024-03-29T15:28:19"
			}
		},
		"malwareProtection": {
			"serviceRole": "<string>",
			"scanEc2InstanceWithFindings": {
				"ebsVolumes": {
					"status": "<string>",
					"updatedAt": "2024-05-09T23:31:48"
				}
			}
		},
		"database": {
			"rds": {
				"databaseEvents": {
					"status": "<string>",
					"updatedAt": "2022-12-22T04:15:33"
				}
			}
		}
	},
	"features": [
		{
			"name": "<string>",
			"status": "<string>",
			"updatedAt": 681,
			"additionalConfiguration": null
		}
	],
	"tags": {},
	"serviceRole": "<string>"
}

​
Workflow Library Example

Guardduty Get Detector with Aws and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop