How can I get resources referenced in an event in cloudTrailEvent?

I want collet cloudtrail event log to provider a lifcycle event log query for any resources in any region.

I found LookupEvents API of cloudtrail is provider it(there are some limit for this api: ). howerver, the cloudtrail log files not provider it.

주제

태그

언어

English

질문됨 2년 전257회 조회

1개 답변

이 답변이 도움이 되었나요?커뮤니티가 여러분의 지식을 활용할 수 있도록 정답을 찬성하세요.

I believe the easiest way to achieve that would be to query your CloudTrail Log Files using Amazon Athena

답변함 2년 전

AWS-User-1972531
2년 전
athena just use cloudtrail log stored s3. the problem is that the cloudtrail event not contain the resources referenced. even though i use Athena， i couldn't get the lifecycle event of specific resource. the LookupEvents API respone has resources field that contain resouces referenced.
Nati_C
2년 전
Have you looked at the resources ARRAY returned in the Athena query?
AWS-User-1972531
2년 전
Yes， I did. However, there is not found any event with field resources.

I read the cloudtrail event reference record contents . it's seems that just some event with resources field.

For example logs with the resources field, see AWS STS API Event in CloudTrail Log File in the IAM User Guide or Logging AWS KMS API Calls in the AWS Key Management Service Developer Guide.

관련 콘텐츠