Iam all user activity email alert

0

hi team,

Is there any way to send email notification for all iam users activity in aws ? Please share suggestions

3 réponses
1

CloudTrail will have IAM user activity. You can get CloudTrail events in EventBridge and create rules to match what you're interested in, or via CloudWatch Logs where you can create Metric Filters and alarms. You can target SNS for notifications or process via Lambda for example.

EXPERT
répondu il y a un an
  • Hi Skinsman,

    I used to create cloudwatch event rule and created lambda function but however its not working below is the event pattern.

    { "source": [ "aws.iam" ], "detail-type": [ "AWS API Call via CloudTrail" ], "detail": { "eventSource": [ "iam.amazonaws.com" ] } }

0

One thing to add, you should well define what activities you want to be alerted, you probably don't want to be overwhelmed by alert mails.

AWS
yhaifa
répondu il y a un an
  • mainly i need for iam policy,role changes, network changes only.

0

I would like to understand what you are trying to solve for? What is your requirement? But, to answer your question, you can send trails via email, but that can be overwhelming for your mail system. A much better architecture would be to use SQS with SNS. You can find relevant documentation details here.

AWS
répondu il y a un an
  • Hi, I am trying to get email alerts for aws all resource changes and activity.

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions