Guard Duty: Disable suppression rules for account(s)

Question

How can suppression rules be disabled for (a) certain account(s) in an organization?
So most accounts should be able to utilize suppression rules, but some accounts should not be able to suppress anything.

Answer

Hi. Unfortunately, in a multi-account environment only the GuardDuty administrator can maitain suppression rules. Guarduty administrator can create suppression rule for specific Account by using suppression filter, so consider to using this.

> In a multi-account environment only the GuardDuty administrator can create suppression rules.

https://docs.aws.amazon.com/guardduty/latest/ug/findings_suppression-rule.html

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_filter-findings.html

Guard Duty: Disable suppression rules for account(s)

Contenuto pertinente