GuardDutyのランタイムモニタリングを全リージョンで有効にする（Pythonスクリプト）

import boto3
from botocore.exceptions import ClientError

ec2 = boto3.client("ec2")

def main() -> None:
    regions = ec2.describe_regions()["Regions"]
    for region in regions:
        region_name = region["RegionName"]
        print(region_name)

        update_guardduty_runtime_monitoring(region_name)

def update_guardduty_runtime_monitoring(region_name: str) -> None:
    guardduty = boto3.client("guardduty", region_name=region_name)

    try:
        detector_id = guardduty.list_detectors()["DetectorIds"][0]
        guardduty.update_detector(
            DetectorId=detector_id,
            Features=[
                {
                    "Name": "RUNTIME_MONITORING",
                    "Status": "ENABLED",
                    # 下記は、必要に応じて有効にする
                    # "AdditionalConfiguration": [
                    #     {"Name": "EKS_ADDON_MANAGEMENT", "Status": "ENABLED"},
                    #     {"Name": "ECS_FARGATE_AGENT_MANAGEMENT", "Status": "ENABLED"},
                    #     {"Name": "EC2_AGENT_MANAGEMENT", "Status": "ENABLED"},
                    # ],
                },
            ],
        )
    except ClientError as e:
        if e.response["Error"]["Code"] == "AccessDeniedException":
            print(f"  skip because AccessDeniedException")
        else:
            raise

if __name__ == "__main__":
    main()

python app.py