By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

CloudTrail event codeartifact.amazonaws.com : DescribePackage not readOnly

0

I'm working on analyzing CloudTrail events as they come in and when I was setting up a filter ( ignore events that are readOnly ) I was surpised to see the above events coming through. The event DescribePackage from the source codeartifact.amazonaws.com is not marked as a readOnly event. Does anyone know of a reason why this would be or is this an oversight on AWS's part? ( I removed some parts of the event below )

{
  "eventVersion" : "1.08",
  "userIdentity" : { },
  "eventSource" : "codeartifact.amazonaws.com",
  "eventName" : "DescribePackage",
  "awsRegion" : "us-east-1",
  "readOnly" : false,
  "eventType" : "AwsApiCall",
  "managementEvent" : true,
}
Topics
Developer ToolsManagement & Governance
Tags
AWS CodeArtifactAWS CloudTrail
Language
English
larryjkl
asked a year ago218 views
1 Answer
0
Accepted Answer

Thanks for reporting this, we will be updating DescribePackage to be marked as readOnly in CloudTrail.

profile pictureAWS
Carl Lewis
answered a year ago
  • larryjkl
    a year ago

    Great, thanks. While you are in there : ) This one seems like it could be readOnly as well, unless there's something it's doing that I'm missing ( I can open a new question if that's easier, let me know )

    guardduty.amazonaws.com : GetRemainingFreeTrialDays

    { "eventVersion" : "1.08", "eventTime" : "2023-04-21T14:33:23Z", "eventSource" : "guardduty.amazonaws.com", "eventName" : "GetRemainingFreeTrialDays", "requestParameters" : { "detectorId" : "", "accountIds" : [ "", "****" ] }, "readOnly" : false, "eventType" : "AwsApiCall", "managementEvent" : true, "eventCategory" : "Management" }

  • Carl Lewis
    a year ago

    Yes I would suggest opening a new question for GetRemainingFreeTrialDays and tag it with GuardDuty.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content