Questions tagged with AWS CloudTrail
Content language: English
Select up to 5 tags to filter
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
How to find all actions/events that are able to create or modify a specific resource?
Below are 2 examples, however, **the question is more general and applies to any resource**:
1) I tried to...
1
answers
0
votes
282
views
asked a year agolg...
I have created a cloudtrail with cloudwatch log for S3 and can get all logs for the PutObject and DeleteObject events. When it generates the PutObject event, it shows with object (file name) detail,...
2
answers
0
votes
613
views
asked a year agolg...
Hi,
I have just run Control Tower successfully in a new account. Everything created without error, however, when I go to the dashboard, the newly created Audit and Log shared accounts both show...
2
answers
0
votes
390
views
asked a year agolg...
I never queried CloudTrail. I wanted to see if anyone has modified specific DB instance in the past months or past year(s). How do I retrieve the details?
1
answers
0
votes
357
views
asked a year agolg...
# Aim
Our organization had a functional requirement where the name of the CloudWatch Log Group for the Org trail needs to be in a certain format.
# Justification
By creating duplicate Trails across...
3
answers
1
votes
534
views
asked a year agolg...
I am ingesting my CloudTrail logs into my self managed ElasticSearch cluster today via CloudWatch an a Lambda subscription.
I've noticed that the execution is basically a 1:1 for my messages though,...
2
answers
0
votes
663
views
asked a year agolg...
I believe we have our software & systems updated to use TLS 1.2 so that they dont break as AWS removes TLS 1.1 from their APIs. However I would like to verify there are no calls coming in.
We setup a...
3
answers
1
votes
1582
views
asked a year agolg...
```
mapUsers:
----
- userarn: arn:aws:iam::xxxxxxxxxx:user/username1
username: username1
groups:
- system:masters
- userarn: arn:aws:iam::xxxxxxxxxxxx:user/username2
username: username2
...
1
answers
0
votes
662
views
asked a year agolg...
If i create a manual backup of my RDS postgre instance using console, I can see the event in cloudtrail as CreateDBSnapshot, but for automated backup for my RDS postgre instance, though backup is...
Accepted AnswerAWS CloudTrail
1
answers
0
votes
636
views
asked a year agolg...
```
Unauthorised API call has been made :Region - us-east-1, Service - cloudtrail,Action - LookupEvents, API Params - {'LookupAttributes': [{'AttributeKey': 'EventName', 'AttributeValue':...
1
answers
0
votes
241
views
asked a year agolg...
Hi Team,
Someone or any other way EC2 instance stopped in our production account. I have checked in cloud trail with event name "StopInstances" but i am not seeing this the specific stopped event in...
1
answers
0
votes
389
views
asked a year agolg...
Hi,
We have recently implemented a WAF rule for our load balancer. We can see both the access logs for allowed and blocked requests in the overview section. My question is, is there a way to view the...
2
answers
0
votes
699
views
asked a year agolg...