- Newest
- Most votes
- Most comments
CloudTrail will have IAM user activity. You can get CloudTrail events in EventBridge and create rules to match what you're interested in, or via CloudWatch Logs where you can create Metric Filters and alarms. You can target SNS for notifications or process via Lambda for example.
One thing to add, you should well define what activities you want to be alerted, you probably don't want to be overwhelmed by alert mails.
mainly i need for iam policy,role changes, network changes only.
I would like to understand what you are trying to solve for? What is your requirement? But, to answer your question, you can send trails via email, but that can be overwhelming for your mail system. A much better architecture would be to use SQS with SNS. You can find relevant documentation details here.
Hi, I am trying to get email alerts for aws all resource changes and activity.
Relevant content
AWS OFFICIALUpdated 2 years ago- AWS OFFICIALUpdated 18 days ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago
Hi Skinsman,
I used to create cloudwatch event rule and created lambda function but however its not working below is the event pattern.
{ "source": [ "aws.iam" ], "detail-type": [ "AWS API Call via CloudTrail" ], "detail": { "eventSource": [ "iam.amazonaws.com" ] } }