ReadOnly events are not reflecting in Cloudwatch log group from Event bridge

1

Hi, I configured this event pattern

{
  "$or": [{
    "detail": {
      "eventType": ["AwsApiCall", "AwsConsoleSignIn", "AwsServiceEvent", "AwsConsoleAction", "AwsCloudTrailInsight"],
      "eventName": [{
        "anything-but": ["GetObject", "CreateLogStream"]
      }]
    }
  }, {
    "detail-type": ["Inspector2 Finding", "Inspector2 Coverage"]
  }]
}

For some reason Im not reciving read only events except a few(LookupEvents, AssumeRole, etc...) but, im not recieving any of the Describe*, List* (basically any read only management events).

Earlier, I had no issues related to read or write events. Everything was working as expected.

I also have tested the event pattern by entering a pattern from cloudwatch to test the pattern

I have a trail with all read, write, management as well as data events enabled, but still its the same issue.

I also have updated to event pattern to capture everything starts with accountID

{
  "account": ["941086XXXXXX"]
}

Even after updating, its still the same.

What I need to do to solve this problem? Thanks!

답변 없음

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠