# Amazon Detective API

> Amazon Detective API on Apizie: 24 endpoints (Accepts an invitation for the member account to contribute data to a behavior graph. This operation can only…, Gets data source package information for the behavior graph., Gets information on the data source package history for an account., Creates a new behavior graph for the calling account, and sets that account as the administrator account.…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:amazonaws-detective/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-detective`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://apizie.tech/api/cloud/amazonaws-detective
- OpenAPI: https://apizie.tech/api/cloud/amazonaws-detective/openapi.json

Detective uses machine learning and purpose-built visualizations to help you to analyze and investigate security issues across your Amazon Web Services (Amazon Web Services) workloads. Detective automatically extracts…

## Endpoints

### Accepts an invitation for the member account to contribute data to a behavior graph. This operation can only…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/accept-invitation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Gets data source package information for the behavior graph.
`POST https://apizie.tech/v1/cloud:amazonaws-detective/batch-get-graph-member-datasources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Gets information on the data source package history for an account.
`POST https://apizie.tech/v1/cloud:amazonaws-detective/batch-get-membership-datasources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Creates a new behavior graph for the calling account, and sets that account as the administrator account.…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/create-graph` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### CreateMembers is used to send invitations to accounts. For the organization behavior graph, the Detective…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/create-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Disables the specified behavior graph and queues it to be deleted. This operation removes the behavior graph…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/delete-graph` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Removes the specified member accounts from the behavior graph. The removed accounts no longer contribute…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/delete-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Returns information about the configuration for the organization behavior graph. Currently indicates whether…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/describe-organization-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Removes the Detective administrator account in the current Region. Deletes the organization behavior graph.…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/disable-organization-admin-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |

### Removes the member account from the specified behavior graph. This operation can only be called by an…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/disassociate-membership` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Designates the Detective administrator account for the organization in the current Region. If the account…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/enable-organization-admin-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Returns the membership details for specified member accounts for a behavior graph.
`POST https://apizie.tech/v1/cloud:amazonaws-detective/get-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Lists data source packages in the behavior graph.
`POST https://apizie.tech/v1/cloud:amazonaws-detective/list-datasource-packages` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Returns the list of behavior graphs that the calling account is an administrator account of. This operation…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/list-graphs` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Retrieves the list of open and accepted behavior graph invitations for the member account. This operation…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/list-invitations` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Retrieves the list of member accounts for a behavior graph. For invited accounts, the results do not include…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/list-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Returns information about the Detective administrator account for an organization. Can only be called by the…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/list-organization-admin-accounts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Returns the tag values that are assigned to a behavior graph.
`GET https://apizie.tech/v1/cloud:amazonaws-detective/list-tags-for-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| ResourceArn | string | yes | The ARN of the behavior graph for which to retrieve the tag values. |

### Applies tag values to a behavior graph.
`POST https://apizie.tech/v1/cloud:amazonaws-detective/tag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| ResourceArn | string | yes | The ARN of the behavior graph to assign the tags to. |
| body | object | yes | JSON request body |

### Rejects an invitation to contribute the account data to a behavior graph. This operation must be called by…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/reject-invitation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Sends a request to enable data ingest for a member account that has a status of ACCEPTED_BUT_DISABLED . For…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/start-monitoring-member` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Removes tags from a behavior graph.
`POST https://apizie.tech/v1/cloud:amazonaws-detective/untag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| ResourceArn | string | yes | The ARN of the behavior graph to remove the tags from. |
| tagKeys | array | yes | The tag keys of the tags to remove from the behavior graph. You can remove up to 50 tags at a time. |

### Starts a data source packages for the behavior graph.
`POST https://apizie.tech/v1/cloud:amazonaws-detective/update-datasource-packages` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Updates the configuration for the Organizations integration in the current Region. Can only be called by the…
`POST https://apizie.tech/v1/cloud:amazonaws-detective/update-organization-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

## Example
```
curl "https://apizie.tech/v1/cloud:amazonaws-detective/accept-invitation" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Amazon Detective API?
Create a free Apizie key, then send POST https://apizie.tech/v1/cloud:amazonaws-detective/accept-invitation with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Amazon Detective API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Amazon Detective itself also needs your own key from amazonaws.com.

### Can AI agents use the Amazon Detective API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-detective.

### What is the status of the Amazon Detective API?
Needs your own provider key (bring your own key)