Amazon Detective

Amazon Detective Data Sources API

Data source package management operations

Documentation GitHub OpenAPI

Operations 4

POST /graph/datasources/get Batch Get Graph Member Datasources #

POST /graph/datasources/list List Datasource Packages #

POST /graph/datasources/update Update Datasource Packages #

POST /membership/datasources/get Batch Get Membership Datasources #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/amazon-detective:amazon-detective-data-sources-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.1.0
info:
  title: Amazon Detective Data Sources API
  version: '2018-10-26'
  description: Generated from AWS's published Smithy model for Amazon Detective. 4 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://api.detective.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
paths:
  /graph/datasources/get:
    post:
      operationId: BatchGetGraphMemberDatasources
      summary: Batch Get Graph Member Datasources
      description: Gets data source package information for the behavior graph.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BatchGetGraphMemberDatasourcesResponse'
        '403':
          description: AccessDeniedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '500':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
        '400':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BatchGetGraphMemberDatasourcesRequest'
      tags:
      - Data Sources
  /graph/datasources/list:
    post:
      operationId: ListDatasourcePackages
      summary: List Datasource Packages
      description: Lists data source packages in the behavior graph.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListDatasourcePackagesResponse'
        '403':
          description: AccessDeniedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '500':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
        '400':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ListDatasourcePackagesRequest'
      tags:
      - Data Sources
  /graph/datasources/update:
    post:
      operationId: UpdateDatasourcePackages
      summary: Update Datasource Packages
      description: Starts a data source package for the Detective behavior graph.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: string
        '403':
          description: AccessDeniedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '500':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
        '402':
          description: ServiceQuotaExceededException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceQuotaExceededException'
        '400':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateDatasourcePackagesRequest'
      tags:
      - Data Sources
  /membership/datasources/get:
    post:
      operationId: BatchGetMembershipDatasources
      summary: Batch Get Membership Datasources
      description: Gets information on the data source package history for an account.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BatchGetMembershipDatasourcesResponse'
        '403':
          description: AccessDeniedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '500':
          description: InternalServerException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
        '400':
          description: ValidationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BatchGetMembershipDatasourcesRequest'
      tags:
      - Data Sources
components:
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical
        request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: detective
  schemas:
    AccessDeniedException:
      type: object
      properties:
        Message:
          type: string
        ErrorCode:
          type: string
          enum:
          - INVALID_GRAPH_ARN
          - INVALID_REQUEST_BODY
          - INTERNAL_ERROR
          description: The SDK default error code associated with the access denied exception.
        ErrorCodeReason:
          type: string
          description: The SDK default explanation of why access was denied.
        SubErrorCode:
          type: string
          enum:
          - INVALID_GRAPH_ARN
          - INVALID_REQUEST_BODY
          - INTERNAL_ERROR
          description: The error code associated with the access denied exception.
        SubErrorCodeReason:
          type: string
          description: An explanation of why access was denied.
    BatchGetGraphMemberDatasourcesRequest:
      type: object
      properties:
        GraphArn:
          type: string
          description: The ARN of the behavior graph.
        AccountIds:
          type: array
          items:
            type: string
          description: The list of Amazon Web Services accounts to get data source package information on.
      required:
      - GraphArn
      - AccountIds
    BatchGetGraphMemberDatasourcesResponse:
      type: object
      properties:
        MemberDatasources:
          type: array
          items:
            $ref: '#/components/schemas/MembershipDatasources'
          description: Details on the status of data source packages for members of the behavior graph.
        UnprocessedAccounts:
          type: array
          items:
            $ref: '#/components/schemas/UnprocessedAccount'
          description: Accounts that data source package information could not be retrieved for.
    BatchGetMembershipDatasourcesRequest:
      type: object
      properties:
        GraphArns:
          type: array
          items:
            type: string
          description: The ARN of the behavior graph.
      required:
      - GraphArns
    BatchGetMembershipDatasourcesResponse:
      type: object
      properties:
        MembershipDatasources:
          type: array
          items:
            $ref: '#/components/schemas/MembershipDatasources'
          description: Details on the data source package history for an member of the behavior graph.
        UnprocessedGraphs:
          type: array
          items:
            $ref: '#/components/schemas/UnprocessedGraph'
          description: Graphs that data source package information could not be retrieved for.
    DatasourcePackageIngestDetail:
      type: object
      properties:
        DatasourcePackageIngestState:
          type: string
          enum:
          - STARTED
          - STOPPED
          - DISABLED
          description: Details on which data source packages are ingested for a member account.
        LastIngestStateChange:
          type: object
          additionalProperties:
            $ref: '#/components/schemas/TimestampForCollection'
          description: The date a data source package was enabled for this account
    InternalServerException:
      type: object
      properties:
        Message:
          type: string
    ListDatasourcePackagesRequest:
      type: object
      properties:
        GraphArn:
          type: string
          description: The ARN of the behavior graph.
        NextToken:
          type: string
          description: For requests to get the next page of results, the pagination token that was returned with the previous
            set of results. The initial request does not include a pagination token.
        MaxResults:
          type: integer
          description: The maximum number of results to return.
      required:
      - GraphArn
    ListDatasourcePackagesResponse:
      type: object
      properties:
        DatasourcePackages:
          type: object
          additionalProperties:
            $ref: '#/components/schemas/DatasourcePackageIngestDetail'
          description: Details on the data source packages active in the behavior graph.
        NextToken:
          type: string
          description: For requests to get the next page of results, the pagination token that was returned with the previous
            set of results. The initial request does not include a pagination token.
    MembershipDatasources:
      type: object
      properties:
        AccountId:
          type: string
          description: The account identifier of the Amazon Web Services account.
        GraphArn:
          type: string
          description: The ARN of the organization behavior graph.
        DatasourcePackageIngestHistory:
          type: object
          additionalProperties:
            type: object
            additionalProperties:
              $ref: '#/components/schemas/TimestampForCollection'
          description: Details on when a data source package was added to a behavior graph.
    ResourceNotFoundException:
      type: object
      properties:
        Message:
          type: string
    ServiceQuotaExceededException:
      type: object
      properties:
        Message:
          type: string
        Resources:
          type: array
          items:
            type: string
          description: The type of resource that has exceeded the service quota.
    TimestampForCollection:
      type: object
      properties:
        Timestamp:
          type: string
          format: date-time
          description: The data and time when data collection began for a source package. The value is an ISO8601 formatted
            string. For example, 2021-08-18T16:35:56.284Z.
    UnprocessedAccount:
      type: object
      properties:
        AccountId:
          type: string
          description: The Amazon Web Services account identifier of the member account that was not processed.
        Reason:
          type: string
          description: The reason that the member account request could not be processed.
    UnprocessedGraph:
      type: object
      properties:
        GraphArn:
          type: string
          description: The ARN of the organization behavior graph.
        Reason:
          type: string
          description: The reason data source package information could not be processed for a behavior graph.
    UpdateDatasourcePackagesRequest:
      type: object
      properties:
        GraphArn:
          type: string
          description: The ARN of the behavior graph.
        DatasourcePackages:
          type: array
          items:
            type: string
            enum:
            - DETECTIVE_CORE
            - EKS_AUDIT
            - ASFF_SECURITYHUB_FINDING
          description: The data source package to start for the behavior graph.
      required:
      - GraphArn
      - DatasourcePackages
    ValidationException:
      type: object
      properties:
        Message:
          type: string
        ErrorCode:
          type: string
          enum:
          - INVALID_GRAPH_ARN
          - INVALID_REQUEST_BODY
          - INTERNAL_ERROR
          description: The error code associated with the validation failure.
        ErrorCodeReason:
          type: string
          description: An explanation of why validation failed.
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/3cd98287b471c106254abd89279cc87308d38bfd/models/detective/service/2018-10-26/detective-2018-10-26.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)

Amazon Detective Data Sources API

Operations 4

Documentation

Specifications

Schemas & Data

Other Resources