Ravi Sir's Cards › AWS
Org-wide delegated admin
This revision card explains Org-wide delegated admin. It starts from the need that enabling GuardDuty in one account leaves fifty member accounts blind. It describes in Organizations, set a delegated administrator so GuardDuty/Security Hub cover member accounts centrally. The how-to section notes from the management account, designate security-tooling account as admin; auto-enable for new accounts. An example on the card is a new member account shows up in GuardDuty admin with findings within the enable window.
Read card text
What this card says
Why do we need it?
Enabling GuardDuty in one account leaves fifty member accounts blind.
What is it?
In Organizations, set a delegated administrator so GuardDuty/Security Hub cover member accounts centrally.
delegated administrator
How to do it
From the management account, designate security-tooling account as admin; auto-enable for new accounts.
Example
A new member account shows up in GuardDuty admin with findings within the enable window.