[AWS::GuardDuty::Detector] - [Enhancement] - Allow UpdateOrganizationConfiguration properties in the CloudFormation resource

[jainakhi]

Name of the resource

AWS::GuardDuty::Detector

Resource name

AWS::GuardDuty::Detector

Description

Add support to manage GuardDuty features on organization-level and enable all features mentioned in the command line. This is currently possible through CLI and API.

Successful command looks like:

aws guardduty update-organization-configuration --detector-id <detector-id> --auto-enable-organization-members=ALL

aws guardduty update-organization-configuration --detector-id <detector-id> --auto-enable --features '[{"Name": "LAMBDA_NETWORK_LOGS", "AutoEnable": "ALL"}]'

Related Issue
#2173

Reference
https://docs.aws.amazon.com/guardduty/latest/APIReference/API_OrganizationFeatureConfiguration.html
https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateOrganizationConfiguration.html

Other Details

No response