Amazon Detective
API Reference (API Version 2018-10-26)


Amazon Detective is currently in preview.

Creates a new behavior graph for the calling account, and sets that account as the master account. This operation is called by the account that is enabling Detective.

The operation also enables Detective for the calling account in the currently selected Region. It returns the ARN of the new behavior graph.

CreateGraph triggers a process to create the corresponding data tables for the new behavior graph.

An account can only be the master account for one behavior graph within a Region. If the same account calls CreateGraph with the same master account, it always returns the same behavior graph ARN. It does not create a new behavior graph.

Request Syntax

POST /graph HTTP/1.1

URI Request Parameters

The request does not use any URI parameters.

Request Body

The request does not have a request body.

Response Syntax

HTTP/1.1 200 Content-type: application/json { "GraphArn": "string" }

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.


The ARN of the new behavior graph.

Type: String

Pattern: ^arn:aws[-\w]{0,10}?:detective:[-\w]{2,20}?:\d{12}?:graph:[abcdef\d]{32}?$


For information about the errors that are common to all actions, see Common Errors.


Amazon Detective is currently in preview.

The request attempted an invalid action.

HTTP Status Code: 409


Amazon Detective is currently in preview.

The request was valid but failed because of a problem with the service.

HTTP Status Code: 500



Sample Request

POST /graph HTTP/1.1 Host: Accept-Encoding: identity Content-Length: 0 Authorization: AUTHPARAMS X-Amz-Date: 20200122T193018Z User-Agent: aws-cli/1.14.29 Python/2.7.9 Windows/8 botocore/1.8.33


Sample Response

HTTP/1.1 200 OK Content-Type: application/json Content-Length: 94 Date: Wed, 22 Jan 2020 23:07:46 GMT x-amzn-RequestId: 397d0549-0092-11e8-a0ee-a7f9aa6e7572 Connection: Keep-alive { "GraphArn": "arn:aws:detective:us-east-1:111122223333:graph:027c7c4610ea4aacaf0b883093cab899" }

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: