{{ }} Substitute variables
Adjust the variable values according to your preference.
Policy Code
Referenced from: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examples_guardduty.html
1{
2 "Version": "2012-10-17",
3 "Statement": [
4 {
5 "Effect": "Deny",
6 "Action": [
7 "guardduty:AcceptInvitation",
8 "guardduty:ArchiveFindings",
9 "guardduty:CreateDetector",
10 "guardduty:CreateFilter",
11 "guardduty:CreateIPSet",
12 "guardduty:CreateMembers",
13 "guardduty:CreatePublishingDestination",
14 "guardduty:CreateSampleFindings",
15 "guardduty:CreateThreatIntelSet",
16 "guardduty:DeclineInvitations",
17 "guardduty:DeleteDetector",
18 "guardduty:DeleteFilter",
19 "guardduty:DeleteInvitations",
20 "guardduty:DeleteIPSet",
21 "guardduty:DeleteMembers",
22 "guardduty:DeletePublishingDestination",
23 "guardduty:DeleteThreatIntelSet",
24 "guardduty:DisassociateFromMasterAccount",
25 "guardduty:DisassociateMembers",
26 "guardduty:InviteMembers",
27 "guardduty:StartMonitoringMembers",
28 "guardduty:StopMonitoringMembers",
29 "guardduty:TagResource",
30 "guardduty:UnarchiveFindings",
31 "guardduty:UntagResource",
32 "guardduty:UpdateDetector",
33 "guardduty:UpdateFilter",
34 "guardduty:UpdateFindingsFeedback",
35 "guardduty:UpdateIPSet",
36 "guardduty:UpdatePublishingDestination",
37 "guardduty:UpdateThreatIntelSet"
38 ],
39 "Resource": "*"
40 }
41 ]
42}