guardduty_create_investigation: This API is currently available as a preview

In paws.security.identity: 'Amazon Web Services' Security, Identity, & Compliance Services

This API is currently available as a preview

Description

This API is currently available as a preview. During the preview, you can initiate up to 10 investigations per account per day, with a total limit of 100 investigations per account. This feature is available in the following Amazon Web Services Regions: US East (N. Virginia), US East (Ohio), US West (Oregon), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Paris), Europe (Stockholm), and Asia Pacific (Tokyo).

See https://www.paws-r-sdk.com/docs/guardduty_create_investigation/ for full documentation.

Usage

guardduty_create_investigation(DetectorId, TriggerPrompt, ClientToken = NULL)

Arguments

DetectorId	[required] The unique ID of the GuardDuty detector for the account in which the investigation is created. To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the list_detectors API.
TriggerPrompt	[required] A natural-language description of what to investigate. For example: "Investigate finding 1ab2c3d4e5f6a7b8c9d0e1f2a3b4c5d6 in account 123456789012" "Analyze findings in account with id 123456789012" "Analyze findings in my organization"
ClientToken	The idempotency token for the create request.

paws.security.identity documentation built on Oct. 8, 2026, 9:12 a.m.