CmdID / aws / aws detective
aws detective start-investigation
Detective investigations lets you investigate IAM users and IAM roles using indicators of compromise. AWS CLI reference
4 options Its page in the AWS CLI reference
Options
--entity-arnThe unique Amazon Resource Name (ARN) of the IAM user and IAM role.--graph-arnThe Amazon Resource Name (ARN) of the behavior graph.--scope-end-timeThe data and time when the investigation ended.--scope-start-timeThe data and time when the investigation began.