capabilities.work

Enable a Data Source Package

A 3-step recipe with Amazon Detective. We can help you get access.

Recipe · 3 steps

Enable a Data Source Package

Update data source packages on a graph, then verify ingest state at graph and member level.

  1. Start the requested data source packages for the behavior graph.
  2. List the data source packages on the behavior graph to observe their current ingest state after the update.
  3. Retrieve the per-member data source package ingest history for the supplied accounts to confirm the package is being ingested.
What you'll need to have ready
  • graphArn: The ARN of the behavior graph to update.
  • datasourcePackages: The data source packages to start (e.g. DETECTIVE_CORE, EKS_AUDIT, AD_AUDIT).
  • accountIds: The member account identifiers to inspect for ingest history.
  • maxResults: The maximum number of data source packages to return when listing.
For your developer

Arazzo workflow amazon-detective:enable-datasource-package, 3 operations: UpdateDatasourcePackages → ListDatasourcePackages → BatchGetGraphMemberDatasources. Specs on APIs.io.