Questions tagged with AWS CloudTrail
AWS CloudTrail monitors and records account activity across your AWS infrastructure, giving you control over storage, analysis, and remediation actions.
Content language: English
Select up to 5 tags to filter
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
231 results
I have a use case to trigger a lambda function from SQS queue and get data from cloudtrail lookup events api . But the api is giving Rate exceeded error because the SQS is triggering the lambda...
I have hosted a GitHub server on an instance but I want to capture the logs on the instance with a particular post 8433,How to do that?
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDA42S2XXXXXXXXXX",
"arn": "arn:aws:iam::8817318XXXXX:user/XXXXXXX",
...
Hi,
I configured this event pattern
```
{
"$or": [{
"detail": {
"eventType": ["AwsApiCall", "AwsConsoleSignIn", "AwsServiceEvent", "AwsConsoleAction", "AwsCloudTrailInsight"],
...
We have an organization-wide CloudTrail which is logging events to an S3 bucket in a different account (part of the organization). By default, with S3 events turned on, this means we are getting the...
I manage and invoice all of my AWS costs using "Project" tag. Even though all of my cloudtrail trails are tagged with a "Project" tag, the usage type of PaidEventsRecorded shows up as not having a...
I've create the cloudtrail with data event option opened and save for all S3 log!
[Here is image](/media/postImages/original/IMV-Ye8hiSQ1K4873LgoCnkQ)
But when I try upload, delete the file, wating...
I have organization in AWS with multiple accounts. I want to create a trail in one of them called "Stage" for management events, and in near future to create an **organization trail** for all my...
I have created some resources in ap-south-1 region which is not behaving in expected manner.
I have an RDS Instance for which password is managed by AWS Secrets Manager. Whenever the password is...
Hi,
It's not clear from the documentation - does accessKeyId always appear in CloudTrail of AssumeRole events? Also, if the entity that assumed that former role does any action, will the accessKeyId...
Hi AWS, I have a GitHub self-hosted runner installed (Windows) installed on Amazon EC2. I have noticed that the runner is `Offline` and when I login into the server I figured out that somebody has...
asked 10 months ago
Hello,
I have currently setup cloudtrail logs to be query able in athena, however my create table looks something like
```
CREATE EXTERNAL TABLE cloudtrail(
eventVersion STRING,
userIdentity...