AWS adds organization-wide policies for GuardDuty enablement

AWS has added organization-wide policies that centrally enable GuardDuty threat detection across accounts and Regions. The configuration applies to existing accounts and is automatically maintained when new accounts join, replacing separate regional enablement settings that could drift over time. Administrators can set policies at the organization root, organizational unit or individual account level, with regional overrides. Settings imposed by a policy cannot be overridden through the GuardDuty console or API. The feature is available in all AWS commercial Regions and AWS GovCloud (US) Regions.