1 Answer
- Newest
- Most votes
- Most comments
0
Hello,
To check what could be disassociating the Elastic IP on the instance, you can use the CloudTrail tool. You may follow these steps: [1] Open the CloudTrail console. [2] On the left navigation pane, choose Event History. [3] On the lookup attributes drop down list, choose event name. [4] Enter DisassociateAddress as event name value. [5] Choose the timestamp of when the occured. [6] Then check the user agent that executed the API. The user agent will show the agent that disassoiated the Elastic IP.
You can also refer to the following document for more information regarding Cloudtrail event history: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events-console.html#displaying-cloudtrail-events
answered 2 years ago
Relevant content
- asked 3 years ago
- AWS OFFICIALUpdated 3 years ago
- AWS OFFICIALUpdated 3 years ago
- AWS OFFICIALUpdated a year ago
- AWS OFFICIALUpdated 10 months ago
Do you have CloudTrail enabled? You could see what identity is executing that command by looking there.