In this recipe, we will configure GuardDuty to aggregate findings from multiple AWS accounts into a single account. Aggregating findings from multiple accounts into a single dedicated account provides a central place to query the findings from all our accounts. We can also make configuration changes in one place for all the accounts.
Aggregating findings from multiple accounts in GuardDuty
Getting ready
We need two working AWS accounts. We will call them the main account and the member account. The main account will aggregate logs from the member account and any other accounts we add later.
Log in to the member account and note down its account number. The account number can be found in the Support Center, as you saw in the...
