Skip to content

How to check who click action code pipeline in cloudtrail

0

Hi everyone

I have code pipeline with manual approval. But I want to check who approval or reject codepipeline in cloudtrail. How can I do that ?

Tks for reading

1 Answer
0
Accepted Answer

Hello.

I think that an event called "PutApprovalResult" is recorded in CloudTrail.
I checked my AWS account and the following event was recorded.
I think you can identify who approved it from this event history.

{
    "eventVersion": "1.08",
    "userIdentity": {
        "type": "IAMUser",
        "principalId": "yyyyyyyyyyyyyyy",
        "arn": "arn:aws:iam::123456789012:user/test",
        "accountId": "123456789012",
        "accessKeyId": "yyyyyyyyyyyyyy",
        "userName": "test",
        "sessionContext": {
            "sessionIssuer": {},
            "webIdFederationData": {},
            "attributes": {
                "creationDate": "2025-01-10T04:28:48Z",
                "mfaAuthenticated": "false"
            }
        }
    },
    "eventTime": "2025-01-10T04:34:09Z",
    "eventSource": "codepipeline.amazonaws.com",
    "eventName": "PutApprovalResult",
    "awsRegion": "ap-northeast-1",
    "sourceIPAddress": "10.10.10.10",
    "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0",
    "requestParameters": {
        "pipelineName": "test-codepipeline",
        "stageName": "Approval",
        "actionName": "Approval",
        "result": {
            "summary": "",
            "status": "Approved"
        },
        "token": "11111111-1111-1111-1111-1111111111"
    },
    "responseElements": {
        "approvedAt": "Jan 10, 2025 4:34:09 AM"
    },
    "requestID": "11111111-1111-1111-1111-1111111111",
    "eventID": "11111111-1111-1111-1111-1111111111",
    "readOnly": false,
    "eventType": "AwsApiCall",
    "managementEvent": true,
    "recipientAccountId": "123456789012",
    "eventCategory": "Management",
    "tlsDetails": {
        "tlsVersion": "TLSv1.3",
        "cipherSuite": "TLS_AES_128_GCM_SHA256",
        "clientProvidedHostHeader": "codepipeline.ap-northeast-1.amazonaws.com"
    },
    "sessionCredentialFromConsole": "true"
}
EXPERT

answered 2 years ago

EXPERT

reviewed 2 years ago

EXPERT

reviewed 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.