In CloudTrail, how to create a trail that targets only specific type of events?

1

We'd like to create a CloudTrail trail for management events that targets only specific type of events, for example, EBS volume creation, modification, and deletion. I do not see any option to achieve this. Is it not supported by AWS?

Ori
질문됨 3달 전310회 조회
2개 답변
1

Hello.

Events such as creation, modification, and deletion of EBS volumes are included in management events.
I don't think it is possible to create a trail by narrowing down to specific events of a specific service with management events.

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html

profile picture
전문가
답변함 3달 전
-1

There is a thing called Advanced Event Selectors that let you filter specific events from Cloudtrail. Here is a blog that shows how & what you can do with it https://aws.amazon.com/blogs/mt/optimize-aws-cloudtrail-costs-using-advanced-event-selectors/

API level documentation is

profile picture
전문가
Kallu
답변함 3달 전
  • Hi Kallu, thanks for the answer. Unfortunately the Event Selectors are available only for Data Events. EBS events such as I described are not Data Events, but Management Events. In my question I specifically mentioned Management Events.

    How do we get Event Selectors for Management Events?

    Thanks

  • You're correct. Didn't check all the "small print". This would have been nice feature but I guess the typical volume of mgmt events is more manageable than data events so it isn't too much overhead to do filtering when reading the events.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인