All 7 AWS Security Hub & GuardDuty questions
More in AWS Security Hub & GuardDuty
What is AWS Security Hub and how does it aggregate security findings from multiple sources? How can GuardDuty findings be automatically remediated using EventBridge and Lambda for a faster incident response? How does GuardDuty support monitoring for threats specific to Amazon S3, EKS, and RDS beyond general EC2 and account level threats? How can Security Hub's custom insights and automated response actions help security teams prioritize and manage findings more effectively at scale? How should a security team design an end to end incident response workflow that integrates GuardDuty, Security Hub, EventBridge, and Step Functions for both automated triage and human escalation?
Advertisement
AWS › AWS Security Hub & GuardDuty

How can an organization enable GuardDuty and Security Hub consistently across every account in an AWS Organization using delegated administration?

Advanced

Answer

Both GuardDuty and Security Hub support delegated administration, where a designated security account within an AWS Organization automatically manages the service configuration and aggregates findings across every member account, allowing an organization to enable consistent threat detection and centralized security visibility organization wide from a single account, rather than needing to manually configure and monitor each service separately in every individual account.
aws guardduty enable-organization-admin-account --admin-account-id 123456789012
Real-world example A large enterprise designates a dedicated security account as the delegated administrator for both GuardDuty and Security Hub, automatically enabling threat detection across all fifty of its member accounts and aggregating every finding into a single centralized view.

Common follow-ups: What permissions are required to designate a delegated administrator account?;Can individual member accounts opt out of centrally managed GuardDuty or Security Hub configuration?

AWS Organizations & Multi Account Strategy;IAM
All 7 AWS Security Hub & GuardDuty questions