Questions tagged with AWS CloudTrail
Content language: English
Select up to 5 tags to filter
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
```
{
"eventVersion": "1.08",
"userIdentity": {
"type": "IAMUser",
"principalId": "AIDA42S2XXXXXXXXXX",
"arn": "arn:aws:iam::8817318XXXXX:user/XXXXXXX",
...
1
answers
0
votes
178
views
asked 5 months agolg...
Hi,
I configured this event pattern
```
{
"$or": [{
"detail": {
"eventType": ["AwsApiCall", "AwsConsoleSignIn", "AwsServiceEvent", "AwsConsoleAction", "AwsCloudTrailInsight"],
...
0
answers
1
votes
421
views
asked 5 months agolg...
We have an organization-wide CloudTrail which is logging events to an S3 bucket in a different account (part of the organization). By default, with S3 events turned on, this means we are getting the...
1
answers
0
votes
897
views
asked 5 months agolg...
I manage and invoice all of my AWS costs using "Project" tag. Even though all of my cloudtrail trails are tagged with a "Project" tag, the usage type of PaidEventsRecorded shows up as not having a...
1
answers
0
votes
246
views
asked 5 months agolg...
I've create the cloudtrail with data event option opened and save for all S3 log!
[Here is image](/media/postImages/original/IMV-Ye8hiSQ1K4873LgoCnkQ)
But when I try upload, delete the file, wating...
1
answers
0
votes
307
views
asked 5 months agolg...
I have organization in AWS with multiple accounts. I want to create a trail in one of them called "Stage" for management events, and in near future to create an **organization trail** for all my...
2
answers
0
votes
909
views
asked 5 months agolg...
I have created some resources in ap-south-1 region which is not behaving in expected manner.
I have an RDS Instance for which password is managed by AWS Secrets Manager. Whenever the password is...
2
answers
0
votes
385
views
asked 5 months agolg...
Hi,
It's not clear from the documentation - does accessKeyId always appear in CloudTrail of AssumeRole events? Also, if the entity that assumed that former role does any action, will the accessKeyId...
1
answers
0
votes
159
views
asked 6 months agolg...
Hi AWS, I have a GitHub self-hosted runner installed (Windows) installed on Amazon EC2. I have noticed that the runner is `Offline` and when I login into the server I figured out that somebody has...
1
answers
0
votes
218
views
asked 6 months agolg...
Hello,
I have currently setup cloudtrail logs to be query able in athena, however my create table looks something like
```
CREATE EXTERNAL TABLE cloudtrail(
eventVersion STRING,
userIdentity...
1
answers
0
votes
352
views
asked 6 months agolg...
I have a log group and the Timestamp of the log shows today's date, but when I look at the eventTime field in the object described in the log I can see it was actually a few months ago, any one know...
0
answers
0
votes
275
views
asked 6 months agolg...
Hi All, I have created a cloudtrail log to read any s3 dataevent. I see in s3 location, logs have started building. But when I try to query this data in S3 , it's failing with error ...
0
answers
0
votes
108
views
asked 6 months agolg...