Questions tagged with AWS CloudTrail
AWS CloudTrail monitors and records account activity across your AWS infrastructure, giving you control over storage, analysis, and remediation actions.
Content language: English
Select up to 5 tags to filter
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
231 results
Hi, I need to log S3 bucket access (PutObject, GetObject operations) history. One important feature I have to log in to the logging result is **Byte-Range** information of the GetObject operations...
I have an existing org level CloudTrail but it is very slow when querying using Athena. I was thinking of using cloudtrail lake but I want to know how much would it cause me to use it? I don’t need...
I have a CloudTrail Lake and using the following conditions but not getting any all the results event though I know that there are API calls made those days. Please advise.
WHERE eventTime >=...
It looks like to get the events of type `AWS API Call via CloudTrail` I need to have _at least one_ active CloudTrail Trail. However, I still cannot confirm this. The docs aren't very clear on this,...
asked a year ago
How to find all actions/events that are able to create or modify a specific resource?
Below are 2 examples, however, **the question is more general and applies to any resource**:
1) I tried to...
I have created a cloudtrail with cloudwatch log for S3 and can get all logs for the PutObject and DeleteObject events. When it generates the PutObject event, it shows with object (file name) detail,...
Hi,
I have just run Control Tower successfully in a new account. Everything created without error, however, when I go to the dashboard, the newly created Audit and Log shared accounts both show...
I never queried CloudTrail. I wanted to see if anyone has modified specific DB instance in the past months or past year(s). How do I retrieve the details?
# Aim
Our organization had a functional requirement where the name of the CloudWatch Log Group for the Org trail needs to be in a certain format.
# Justification
By creating duplicate Trails across...
I am ingesting my CloudTrail logs into my self managed ElasticSearch cluster today via CloudWatch an a Lambda subscription.
I've noticed that the execution is basically a 1:1 for my messages though,...
I believe we have our software & systems updated to use TLS 1.2 so that they dont break as AWS removes TLS 1.1 from their APIs. However I would like to verify there are no calls coming in.
We setup a...
```
mapUsers:
----
- userarn: arn:aws:iam::xxxxxxxxxx:user/username1
username: username1
groups:
- system:masters
- userarn: arn:aws:iam::xxxxxxxxxxxx:user/username2
username: username2
...