# GuardDuty Member Account Feature Configuration ===============================

data "aws_guardduty_detector" "this" {
  provider = aws.member
}

resource "aws_guardduty_detector_feature" "this" {
  for_each = local.features

  provider    = aws.member
  detector_id = data.aws_guardduty_detector.this.id
  name        = each.key
  status      = each.value.status ? "ENABLED" : "DISABLED"

  dynamic "additional_configuration" {
    for_each = each.value.additional_configuration
    content {
      name   = additional_configuration.key
      status = additional_configuration.value ? "ENABLED" : "DISABLED"
    }
  }
}