Questions tagged with AWS CloudTrail
Content language: English
Select up to 5 tags to filter
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
It looks like to get the events of type `AWS API Call via CloudTrail` I need to have _at least one_ active CloudTrail Trail. However, I still cannot confirm this. The docs aren't very clear on this,...
1
answers
0
votes
516
views
asked a year agolg...
How to find all actions/events that are able to create or modify a specific resource?
Below are 2 examples, however, **the question is more general and applies to any resource**:
1) I tried to...
1
answers
0
votes
281
views
asked a year agolg...
I have created a cloudtrail with cloudwatch log for S3 and can get all logs for the PutObject and DeleteObject events. When it generates the PutObject event, it shows with object (file name) detail,...
2
answers
0
votes
611
views
asked a year agolg...
Hi,
I have just run Control Tower successfully in a new account. Everything created without error, however, when I go to the dashboard, the newly created Audit and Log shared accounts both show...
2
answers
0
votes
388
views
asked a year agolg...
I never queried CloudTrail. I wanted to see if anyone has modified specific DB instance in the past months or past year(s). How do I retrieve the details?
1
answers
0
votes
355
views
asked a year agolg...
# Aim
Our organization had a functional requirement where the name of the CloudWatch Log Group for the Org trail needs to be in a certain format.
# Justification
By creating duplicate Trails across...
3
answers
1
votes
533
views
asked a year agolg...
I am ingesting my CloudTrail logs into my self managed ElasticSearch cluster today via CloudWatch an a Lambda subscription.
I've noticed that the execution is basically a 1:1 for my messages though,...
2
answers
0
votes
660
views
asked a year agolg...
I believe we have our software & systems updated to use TLS 1.2 so that they dont break as AWS removes TLS 1.1 from their APIs. However I would like to verify there are no calls coming in.
We setup a...
3
answers
1
votes
1580
views
asked a year agolg...
```
mapUsers:
----
- userarn: arn:aws:iam::xxxxxxxxxx:user/username1
username: username1
groups:
- system:masters
- userarn: arn:aws:iam::xxxxxxxxxxxx:user/username2
username: username2
...
1
answers
0
votes
658
views
asked a year agolg...
If i create a manual backup of my RDS postgre instance using console, I can see the event in cloudtrail as CreateDBSnapshot, but for automated backup for my RDS postgre instance, though backup is...
Accepted AnswerAWS CloudTrail
1
answers
0
votes
636
views
asked a year agolg...
```
Unauthorised API call has been made :Region - us-east-1, Service - cloudtrail,Action - LookupEvents, API Params - {'LookupAttributes': [{'AttributeKey': 'EventName', 'AttributeValue':...
1
answers
0
votes
239
views
asked a year agolg...
Hi Team,
Someone or any other way EC2 instance stopped in our production account. I have checked in cloud trail with event name "StopInstances" but i am not seeing this the specific stopped event in...
1
answers
0
votes
386
views
asked a year agolg...