Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Disassociating organization accounts as Detective member accounts

Focus mode
Disassociating organization accounts as Detective member accounts - Amazon Detective

To stop ingesting data from an organization account in the organization behavior graph, you can disassociate the account. Existing data for that account remains in the behavior graph.

When you disassociate an organization account, the status changes to Not a member. Detective stops ingesting data from that account, but the account remains in the list.

Console

From the Account management page, you can disassociate organization accounts as member accounts.

  1. Open the Amazon Detective console at https://console.aws.amazon.com/detective/.

  2. In the Detective navigation pane, choose Account management.

  3. To display the list of enabled accounts, choose Enabled.

  4. Select the check box for each account to disassociate.

  5. Choose Actions. Then choose Disable accounts.

    The account status for the disassociated accounts changes to Not a member.

Detective API/AWS CLI

To get the ARN of your behavior graph to use in the request, use the ListGraphs operation.

To disassociate organization accounts from the organization behavior graph
  • Detective API: Use the DeleteMembers operation. Specify the graph ARN and the list of account identifiers for the member accounts to disassociate.

  • AWS CLI: At the command line, run the delete-members command.

    aws detective delete-members --account-ids <account ID list> --graph-arn <behavior graph ARN>

    Example

    aws detective delete-members --account-ids 444455556666 123456789012 --graph-arn arn:aws:detective:us-east-1:111122223333:graph:123412341234

From the Account management page, you can disassociate organization accounts as member accounts.

  1. Open the Amazon Detective console at https://console.aws.amazon.com/detective/.

  2. In the Detective navigation pane, choose Account management.

  3. To display the list of enabled accounts, choose Enabled.

  4. Select the check box for each account to disassociate.

  5. Choose Actions. Then choose Disable accounts.

    The account status for the disassociated accounts changes to Not a member.

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.