Amazon GuardDuty now supports centralized management using AWS Organizations declarative policies

Amazon GuardDuty now supports AWS Organizations declarative policies, enabling centralized threat detection enablement across every account and Region in your organization.

• Centrally enable GuardDuty threat detection across all accounts and Regions from delegated administrator account
• Configuration automatically applies to existing accounts and new accounts joining the organization
• Supports default configuration for all Regions plus per-Region overrides for specific needs
• Prevents configuration drift by making policy-set enablement immutable via console or API
• Available in all AWS commercial Regions and AWS GovCloud (US) Regions

Organizations can now maintain consistent GuardDuty enablement across multi-account, multi-Region environments without manual per-Region configuration.