Skip to content
AWS for Query.Farm

aws.guardduty.get_organization_statistics

Example SQL Queries

SELECT * FROM
aws.guardduty.get_organization_statistics;

Description

Retrieves how many active member accounts have each feature enabled within GuardDuty. Only a delegated GuardDuty administrator of an organization can run this API.

When you create a new organization, it might take up to 24 hours to generate the statistics for the entire organization.

Table Definition

Column NameColumn Data Type
organization_details

Information about the statistics report for your organization.

STRUCT(
    "updated_at" TIMESTAMP_S,
    "organization_statistics" STRUCT(
        "total_accounts_count" BIGINT,
        "member_accounts_count" BIGINT,
        "active_accounts_count" BIGINT,
        "enabled_accounts_count" BIGINT,
        "count_by_feature" STRUCT(
            "name" VARCHAR,
            "enabled_accounts_count" BIGINT,
            "additional_configuration" STRUCT(
                "name" VARCHAR,
                "enabled_accounts_count" BIGINT
            )[]
        )[]
    )
)
Show child fields
organization_details.organization_statistics

Information about the GuardDuty coverage statistics for members in your Amazon Web Services organization.

Show child fields
organization_details.organization_statistics.active_accounts_count

Total number of active accounts in your Amazon Web Services organization that are associated with GuardDuty.

organization_details.organization_statistics.count_by_feature[]
Show child fields
organization_details.organization_statistics.count_by_feature[].additional_configuration[]
Show child fields
organization_details.organization_statistics.count_by_feature[].additional_configuration[].enabled_accounts_count

Total number of accounts that have enabled the additional configuration.

organization_details.organization_statistics.count_by_feature[].additional_configuration[].name

Name of the additional configuration within a feature.

organization_details.organization_statistics.count_by_feature[].enabled_accounts_count

Total number of accounts that have enabled a specific feature.

organization_details.organization_statistics.count_by_feature[].name

Name of the feature.

organization_details.organization_statistics.enabled_accounts_count

Total number of accounts that have enabled GuardDuty.

organization_details.organization_statistics.member_accounts_count

Total number of accounts in your Amazon Web Services organization that are associated with GuardDuty.

organization_details.organization_statistics.total_accounts_count

Total number of accounts in your Amazon Web Services organization.

organization_details.updated_at

The timestamp at which the organization statistics was last updated. This is in UTC format.