Do I need to enable GuardDuty in the "monitored" account before receiving the invitation?
I am trying to figure out whether or not the admin of the monitored account will be able to receive the invitation at all if the service is not enabled.
Do I need to enable GuardDuty in the "monitored" account before receiving the invitation?
I am trying to figure out whether or not the admin of the monitored account will be able to receive the invitation at all if the service is not enabled.
An member account joining a master account is done at the account level, not at the region level, and thus the member account will receive the invitation, regardless of the region(s) it is using services in.
Regardless of the region an account is operating in, you should give serious consideration to enabling GuardDuty in all regions, even if you are not using a region. As per the AWS documentation here, best practice is to enable GuardDuty in all regions: