GuardDuty / Client / invite_members



Invites Amazon Web Services accounts to become members of an organization administered by the Amazon Web Services account that invokes this API. If you are using Amazon Web Services Organizations to manage your GuardDuty environment, this step is not needed. For more information, see Managing accounts with organizations.

To invite Amazon Web Services accounts, the first step is to ensure that GuardDuty has been enabled in the potential member accounts. You can now invoke this API to add accounts by invitation. The invited accounts can either accept or decline the invitation from their GuardDuty accounts. Each invited Amazon Web Services account can choose to accept the invitation from only one Amazon Web Services account. For more information, see Managing GuardDuty accounts by invitation.

After the invite has been accepted and you choose to disassociate a member account (by using DisassociateMembers) from your account, the details of the member account obtained by invoking CreateMembers, including the associated email addresses, will be retained. This is done so that you can invoke InviteMembers without the need to invoke CreateMembers again. To remove the details associated with a member account, you must also invoke DeleteMembers.

See also: AWS API Documentation

Request Syntax

response = client.invite_members(
  • DetectorId (string) –


    The unique ID of the detector of the GuardDuty account that you want to invite members with.

  • AccountIds (list) –


    A list of account IDs of the accounts that you want to invite to GuardDuty as members.

    • (string) –

  • DisableEmailNotification (boolean) – A Boolean value that specifies whether you want to disable email notification to the accounts that you are inviting to GuardDuty as members.

  • Message (string) – The invitation message that you want to send to the accounts that you’re inviting to GuardDuty as members.

Return type:



Response Syntax

    'UnprocessedAccounts': [
            'AccountId': 'string',
            'Result': 'string'

Response Structure

  • (dict) –

    • UnprocessedAccounts (list) –

      A list of objects that contain the unprocessed account and a result string that explains why it was unprocessed.

      • (dict) –

        Contains information about the accounts that weren’t processed.

        • AccountId (string) –

          The Amazon Web Services account ID.

        • Result (string) –

          A reason why the account hasn’t been processed.


  • GuardDuty.Client.exceptions.BadRequestException

  • GuardDuty.Client.exceptions.InternalServerErrorException