1 Answer
- Newest
- Most votes
- Most comments
2
Using Athena to query is pretty easy and effective, though there's a little setup to do - see https://www.linkedin.com/pulse/using-athena-partition-projection-query-cloudtrail-other-kinsman/.
Also you can use CloudTrail Lake, see a comparison with Athena here - https://www.linkedin.com/pulse/querying-aws-cloudtrail-athena-vs-lake-steve-kinsman/.
Relevant content
- Accepted Answerasked 4 months ago
- Accepted Answerasked 2 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 5 months ago
Your linked-in link was immensly helpful; I was able to use the query to create the Athena table and then start running queries across all of the accounts. The only download I really see is having to specify the accountIds as part of the table defintion; that seems like one of those easy things that could be forgotten, but that seems like more of an Athena limitation. Thanks again, worked great. Will look at Cloudtrail Lake at some point in the future.