# Amazon GuardDuty API

> Amazon GuardDuty API on Apizie: 65 endpoints (Provides the details for the GuardDuty administrator account associated with the current GuardDuty member…, Accepts the invitation to be a member account and get monitored by a GuardDuty administrator account that…, Archives GuardDuty findings that are specified by the list of finding IDs. Only the administrator account…, Lists detectorIds of all the existing Amazon GuardDuty detector resources., …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://www.apizie.tech/v1/cloud:amazonaws-guardduty/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-guardduty`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://www.apizie.tech/api/cloud/amazonaws-guardduty
- OpenAPI: https://www.apizie.tech/api/cloud/amazonaws-guardduty/openapi.json

Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following data sources: VPC flow logs, Amazon Web Services CloudTrail management event logs, CloudTrail S3 data event logs,…

## Endpoints

### Provides the details for the GuardDuty administrator account associated with the current GuardDuty member…
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-administrator-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty member account. |

### Accepts the invitation to be a member account and get monitored by a GuardDuty administrator account that…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/accept-administrator-invitation` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty member account. |
| body | object | yes | JSON request body |

### Archives GuardDuty findings that are specified by the list of finding IDs. Only the administrator account…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/archive-findings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector that specifies the GuardDuty service whose findings you want to archive. |
| body | object | yes | JSON request body |

### Lists detectorIds of all the existing Amazon GuardDuty detector resources.
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/list-detectors` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | integer | no | You can use this parameter to indicate the maximum number of items that you want in the response. The default value is 50. The maximum… |
| nextToken | string | no | You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For… |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |

### Creates a single Amazon GuardDuty detector. A detector is a resource that represents the GuardDuty service.…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/create-detector` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Returns a paginated list of the current filters.
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/list-filters` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that the filter is associated with. |
| maxResults | integer | no | You can use this parameter to indicate the maximum number of items that you want in the response. The default value is 50. The maximum… |
| nextToken | string | no | You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For… |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |

### Creates a filter using the specified finding criteria. The maximum number of saved filters per Amazon Web…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/create-filter` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector belonging to the GuardDuty account that you want to create a filter for. |
| body | object | yes | JSON request body |

### Lists the IPSets of the GuardDuty service specified by the detector ID. If you use this operation from a…
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/list-ipsets` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that the IPSet is associated with. |
| maxResults | integer | no | You can use this parameter to indicate the maximum number of items you want in the response. The default value is 50. The maximum value is… |
| nextToken | string | no | You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For… |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |

### Creates a new IPSet, which is called a trusted IP list in the console user interface. An IPSet is a list of…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/create-ipset` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty account that you want to create an IPSet for. |
| body | object | yes | JSON request body |

### Lists details about all member accounts for the current GuardDuty administrator account.
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/list-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector the member is associated with. |
| maxResults | integer | no | You can use this parameter to indicate the maximum number of items you want in the response. The default value is 50. The maximum value is… |
| nextToken | string | no | You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For… |
| onlyAssociated | string | no | Specifies whether to only return associated members or to return all members (including members who haven't been invited yet or have been… |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |

### Creates member accounts of the current Amazon Web Services account by specifying a list of Amazon Web…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/create-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty account that you want to associate member accounts with. |
| body | object | yes | JSON request body |

### Returns a list of publishing destinations associated with the specified detectorId .
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/list-publishing-destinations` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector to retrieve publishing destinations for. |
| maxResults | integer | no | The maximum number of results to return in the response. |
| nextToken | string | no | A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to… |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |

### Creates a publishing destination to export findings to. The resource to export findings to must exist before…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/create-publishing-destination` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the GuardDuty detector associated with the publishing destination. |
| body | object | yes | JSON request body |

### Generates sample findings of types specified by the list of finding types. If 'NULL' is specified for…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/create-sample-findings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector to create sample findings for. |
| body | object | yes | JSON request body |

### Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID. If you use this operation…
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/list-threat-intel-sets` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that the threatIntelSet is associated with. |
| maxResults | integer | no | You can use this parameter to indicate the maximum number of items that you want in the response. The default value is 50. The maximum… |
| nextToken | string | no | You can use this parameter to paginate results in the response. Set the value of this parameter to null on your first call to the list… |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |

### Creates a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/create-threat-intel-set` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty account that you want to create a threatIntelSet for. |
| body | object | yes | JSON request body |

### Declines invitations sent to the current member account by Amazon Web Services accounts specified by their…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/decline-invitations` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Retrieves an Amazon GuardDuty detector specified by the detectorId. There might be regional differences…
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-detector` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that you want to get. |

### Updates the Amazon GuardDuty detector specified by the detectorId. There might be regional differences…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/update-detector` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector to update. |
| body | object | yes | JSON request body |

### Deletes an Amazon GuardDuty detector that is specified by the detector ID.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/delete-detector` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that you want to delete. |

### Returns the details of the filter specified by the filter name.
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-filter` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that the filter is associated with. |
| filterName | string | yes | The name of the filter you want to get. |

### Updates the filter specified by the filter name.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/update-filter` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that specifies the GuardDuty service where you want to update a filter. |
| filterName | string | yes | The name of the filter. |
| body | object | yes | JSON request body |

### Deletes the filter specified by the filter name.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/delete-filter` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that the filter is associated with. |
| filterName | string | yes | The name of the filter that you want to delete. |

### Retrieves the IPSet specified by the ipSetId .
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-ipset` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that the IPSet is associated with. |
| ipSetId | string | yes | The unique ID of the IPSet to retrieve. |

### Updates the IPSet specified by the IPSet ID.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/update-ipset` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The detectorID that specifies the GuardDuty service whose IPSet you want to update. |
| ipSetId | string | yes | The unique ID that specifies the IPSet that you want to update. |
| body | object | yes | JSON request body |

### Deletes the IPSet specified by the ipSetId . IPSets are called trusted IP lists in the console user interface.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/delete-ipset` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector associated with the IPSet. |
| ipSetId | string | yes | The unique ID of the IPSet to delete. |

### Deletes invitations sent to the current member account by Amazon Web Services accounts specified by their…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/delete-invitations` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Deletes GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/delete-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty account whose members you want to delete. |
| body | object | yes | JSON request body |

### Returns information about the publishing destination specified by the provided destinationId .
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/describe-publishing-destination` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector associated with the publishing destination to retrieve. |
| destinationId | string | yes | The ID of the publishing destination to retrieve. |

### Updates information about the publishing destination specified by the destinationId .
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/update-publishing-destination` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector associated with the publishing destinations to update. |
| destinationId | string | yes | The ID of the publishing destination to update. |
| body | object | yes | JSON request body |

### Deletes the publishing definition with the specified destinationId .
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/delete-publishing-destination` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector associated with the publishing destination to delete. |
| destinationId | string | yes | The ID of the publishing destination to delete. |

### Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-threat-intel-set` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that the threatIntelSet is associated with. |
| threatIntelSetId | string | yes | The unique ID of the threatIntelSet that you want to get. |

### Updates the ThreatIntelSet specified by the ThreatIntelSet ID.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/update-threat-intel-set` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The detectorID that specifies the GuardDuty service whose ThreatIntelSet you want to update. |
| threatIntelSetId | string | yes | The unique ID that specifies the ThreatIntelSet that you want to update. |
| body | object | yes | JSON request body |

### Deletes the ThreatIntelSet specified by the ThreatIntelSet ID.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/delete-threat-intel-set` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that the threatIntelSet is associated with. |
| threatIntelSetId | string | yes | The unique ID of the threatIntelSet that you want to delete. |

### Returns a list of malware scans. Each member account can view the malware scans for their own accounts. An…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/describe-malware-scans` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that the request is associated with. |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Returns information about the account selected as the delegated administrator for GuardDuty. There might be…
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/describe-organization-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector to retrieve information about the delegated administrator from. |
| maxResults | integer | no | You can use this parameter to indicate the maximum number of items that you want in the response. |
| nextToken | string | no | You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For… |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |

### Configures the delegated administrator account with the provided values. You must provide the value for…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/update-organization-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector that configures the delegated administrator. |
| body | object | yes | JSON request body |

### Disables an Amazon Web Services account within the Organization as the GuardDuty delegated administrator.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/disable-organization-admin-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Disassociates the current GuardDuty member account from its administrator account. When you disassociate an…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/disassociate-from-administrator-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty member account. |

### Disassociates GuardDuty member accounts (from the current administrator account) specified by the account…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/disassociate-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty account whose members you want to disassociate from the administrator account. |
| body | object | yes | JSON request body |

### Enables an Amazon Web Services account within the organization as the GuardDuty delegated administrator.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/enable-organization-admin-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Retrieves aggregated statistics for your account. If you are a GuardDuty administrator, you can retrieve the…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-coverage-statistics` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the GuardDuty detector associated to the coverage statistics. |
| body | object | yes | JSON request body |

### Describes Amazon GuardDuty findings specified by finding IDs.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-findings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector that specifies the GuardDuty service whose findings you want to retrieve. |
| body | object | yes | JSON request body |

### Lists Amazon GuardDuty findings statistics for the specified detector ID.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-findings-statistics` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector that specifies the GuardDuty service whose findings' statistics you want to retrieve. |
| body | object | yes | JSON request body |

### Returns the count of all GuardDuty membership invitations that were sent to the current member account…
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-invitations-count` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |

### Returns the details of the malware scan settings. There might be regional differences because some data…
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-malware-scan-settings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that the scan setting is associated with. |

### Updates the malware scan settings. There might be regional differences because some data sources might not…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/update-malware-scan-settings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector that specifies the GuardDuty service where you want to update scan settings. |
| body | object | yes | JSON request body |

### Describes which data sources are enabled for the member account's detector. There might be regional…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-member-detectors` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The detector ID for the administrator account. |
| body | object | yes | JSON request body |

### Retrieves GuardDuty member accounts (of the current GuardDuty administrator account) specified by the…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty account whose members you want to retrieve. |
| body | object | yes | JSON request body |

### Provides the number of days left for each data source used in the free trial period.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-remaining-free-trial-days` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty member account. |
| body | object | yes | JSON request body |

### Lists Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID. For newly…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-usage-statistics` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector that specifies the GuardDuty service whose usage statistics you want to retrieve. |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Invites Amazon Web Services accounts to become members of an organization administered by the Amazon Web…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/invite-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty account that you want to invite members with. |
| body | object | yes | JSON request body |

### Lists coverage details for your GuardDuty account. If you're a GuardDuty administrator, you can retrieve all…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/list-coverage` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector whose coverage details you want to retrieve. |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Lists Amazon GuardDuty findings for the specified detector ID.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/list-findings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector that specifies the GuardDuty service whose findings you want to list. |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Lists all GuardDuty membership invitations that were sent to the current Amazon Web Services account.
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/list-invitations` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | integer | no | You can use this parameter to indicate the maximum number of items that you want in the response. The default value is 50. The maximum… |
| nextToken | string | no | You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For… |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |

### Lists the accounts configured as GuardDuty delegated administrators.
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/list-organization-admin-accounts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | integer | no | The maximum number of results to return in the response. |
| nextToken | string | no | A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to… |
| MaxResults | string | no | Pagination limit |
| NextToken | string | no | Pagination token |

### Lists tags for a resource. Tagging is currently supported for detectors, finding filters, IP sets, threat…
`GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/list-tags-for-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The Amazon Resource Name (ARN) for the given GuardDuty resource. |

### Adds tags to a resource.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/tag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The Amazon Resource Name (ARN) for the GuardDuty resource to apply a tag to. |
| body | object | yes | JSON request body |

### Initiates the malware scan. Invoking this API will automatically create the Service-linked role in the…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/start-malware-scan` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Turns on GuardDuty monitoring of the specified member accounts. Use this operation to restart monitoring of…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/start-monitoring-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector of the GuardDuty administrator account associated with the member accounts to monitor. |
| body | object | yes | JSON request body |

### Stops GuardDuty monitoring for the specified member accounts. Use the StartMonitoringMembers operation to…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/stop-monitoring-members` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The unique ID of the detector associated with the GuardDuty administrator account that is monitoring member accounts. |
| body | object | yes | JSON request body |

### Unarchives GuardDuty findings specified by the findingIds .
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/unarchive-findings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector associated with the findings to unarchive. |
| body | object | yes | JSON request body |

### Removes tags from a resource.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/untag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The Amazon Resource Name (ARN) for the resource to remove tags from. |
| tagKeys | array | yes | The tag keys to remove from the resource. |

### Marks the specified GuardDuty findings as useful or not useful.
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/update-findings-feedback` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The ID of the detector associated with the findings to update feedback for. |
| body | object | yes | JSON request body |

### Contains information on member accounts to be updated. There might be regional differences because some data…
`POST https://www.apizie.tech/v1/cloud:amazonaws-guardduty/update-member-detectors` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| detectorId | string | yes | The detector ID of the administrator account. |
| body | object | yes | JSON request body |

## Example
```
curl "https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-administrator-account" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Amazon GuardDuty API?
Create a free Apizie key, then send GET https://www.apizie.tech/v1/cloud:amazonaws-guardduty/get-administrator-account with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Amazon GuardDuty API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Amazon GuardDuty itself also needs your own key from amazonaws.com.

### Can AI agents use the Amazon GuardDuty API?
Yes. Add the Apizie MCP server (https://www.apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-guardduty.

### What is the status of the Amazon GuardDuty API?
Needs your own provider key (bring your own key)