How to know if a CloudTrail event is a Management Event or Data Event?


When analyzing an CloudTrail event, how to know if it is a management event or data event?

asked 2 years ago748 views
1 Answer
Accepted Answer

If you look at the json of an event, you'll see a property "managementEvent": true, if it's a management event.

In CloudTrail, you can go to Trails > click on the trail > and then you'll see a section for management event and data events, and you can edit those to choose which of either to include in your trail. That way you'll see a list of all currently supported data events.

For more:

answered 2 years ago
profile picture
reviewed 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions