# Amazon Detective

**Canonical:** https://apis.io/providers/amazon-detective/  
**Website:** https://aws.amazon.com/detective/  
**APIs profiled:** 7

Amazon Detective is a security investigation service that makes it easy to analyze, investigate, and quickly identify the root cause of potential security issues or suspicious activities. It automatically collects log data from your AWS resources and uses machine learning, statistical analysis, and graph theory to build interactive visualizations that help you conduct faster and more efficient security investigations.

## Kin Score — 43.6 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 43.6).

| Facet | Score |
|---|---|
| Discoverability | 72.2 |
| Contract Quality | 30.5 |
| Governance | 25.0 |
| Contract Governance | 25.0 |
| Operational Transparency | 42.1 |
| Developer Ergonomics | 50.0 |
| Commercial Clarity | 51.3 |
| Access Clarity | 51.3 |

## Agent readiness — 41.9 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | verified |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (7)

- **Amazon Detective Datasources API** — Data source package management operations
- **Amazon Detective Graph API** — Behavior graph management operations
- **Amazon Detective Investigations API** — Security investigation operations
- **Amazon Detective Invitations API** — Invitation management for member accounts
- **Amazon Detective Members API** — Member account management operations
- **Amazon Detective Organizations API** — AWS Organizations integration operations
- **Amazon Detective Tags API** — Resource tagging operations

## Agentic access (1)

- **Amazon Detective Agentic Access** — 29 operations · 28 acting · 1 human-in-the-loop

## Security (4)

- **Amazon Detective Authentication** — apiKey · 1 scheme
- **Amazon Detective Domain Security** — TLSv1.3 · HSTS · DMARC
- **Amazon Detective Vulnerability Disclosure** — security.txt · contact published
- **Amazon Detective Trust Center** — PCI DSS, HIPAA, FedRAMP, GDPR, FIPS 140

## Plans (1)

- **Amazon Detective Plans Pricing**

## Use cases (5)

- **Security Incident Investigation** — Rapidly investigate security incidents by analyzing entity behavior, network activity, and API call patterns across your AWS environment.
- **Threat Hunting** — Proactively search for suspicious activity and potential threats using behavior analysis and machine learning across your AWS accounts.
- **Root Cause Analysis** — Identify the root cause of security issues by exploring the relationships between resources, users, and events in a behavior graph.
- **Compliance Forensics** — Collect and preserve forensic evidence for compliance investigations using structured investigations with defined scope and time ranges.
- **Multi-Account Security Operations** — Centrally manage security investigations across an AWS Organization from a single administrator account.

## Tags

Forensics, Investigation, Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/amazon-detective/). Scores are computed from the provider's own public artifacts under a published rubric.