Monitor AWS deployments in the cloud by getting a history of AWS API calls for the AWS account, including API calls made via the AWS Management Console, the AWS SDKs, the command line tools, and higher-level AWS services. Identify which users and accounts called AWS APIs for services that support CloudTrail, the source IP address the calls were made from, and when the calls occurred.
Questions tagged [amazon-cloudtrail]
293 questions
34
votes
5 answers
AWS S3 bucket logs vs AWS cloudtrail
What's the difference between the AWS S3 logs and the AWS CloudTrail?
On the doc of CloudTrail I saw this:
CloudTrail adds another dimension to the monitoring capabilities
already offered by AWS. It does not change or replace logging features
…
Steve Ritz
- 2,017
- 4
- 12
- 12
27
votes
1 answer
Amazon AWS: How to get details of terminated EC2 instance from instance id
One of our EC2 instance went missing from running instance list, probably it got terminated accidentally by someone.
In cloudtrail events, I can see some terminate instance events along with event time, user and instance id's which got…
prashant
- 969
- 3
- 11
- 22
11
votes
2 answers
How to trigger an AWS Event Rule when a S3 key with a specific suffix gets uploaded
I'm trying to create an AWS Event Rule that is only triggered when a file with a specific suffix is uploaded to an S3 bucket.
{
"source": [
"aws.s3"
],
"detail-type": [
"AWS API Call via CloudTrail"
],
"detail": {
…
Aaron Zhong
- 921
- 8
- 22
11
votes
3 answers
Where will I find access logs of EC2 Instance in AWS?
I need to check who has created the instance or who has stopped/terminated/rebooted instance along with time.
sharvil_parekh
- 435
- 2
- 5
- 12
10
votes
1 answer
How to debug "Resource creation timed out waiting for completion" in AWS Cloudformation?
I'm brand new to AWS and I have a script which I believe should create an ECS cluster.
When I run the script, my stack hangs in the CREATE_IN_PROGRESS state for over an hour. Eventually, it fails and goes into ROLLBACK_COMPLETE.
When I'm in…
ellen
- 571
- 7
- 23
8
votes
2 answers
Enable object logging on s3 bucket via cloudformation
In AWS S3, you have the ability to visit the console and add 'Object-level logging' to a bucket. You create or select a pre-existing trail and select read and write log types.
Now I am creating buckets via Yaml CloudFormation and want to add a…
Paul
- 578
- 1
- 8
- 23
8
votes
1 answer
Is there a way of finding out who is reading my SQS messages?
I have a queue from which messages are being read as soon as I send some message in it. I have not configured Dead Letter Queue, so messages should always be there if processing of sent message yields exception.
My code, which is a…
sian
- 153
- 1
- 10
8
votes
3 answers
Can I register in Google cloud and Amazon cloud without credit card for free trial?
I want to register on the site for free trial, but as I have seen, they want from me a credit card, unfortunately I do not have a credit card (because the conditions of my country to obtain it are impossible), is there another way to register…
Mohanad
- 117
- 1
- 1
- 2
6
votes
1 answer
How to give multiple lookup-attributes while querying cloudtrail events
Is it possible to query cloudtrail with multiple lookup attributes
When I execute following
aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=CreateTopic
It gives me list of events of type 'CreateTopic'
When I…
Arafat Nalkhande
- 11,078
- 9
- 39
- 63
6
votes
1 answer
Getting CloudTrail Logs into Logstash
I am trying to get logs from ClouldTrail into ElasticSearch so that we can see what is going on in our AWS account better.
I have set up both Logstash and ElasticSearch on my machine (Ubuntu 14.04), and can push text from stdin to ElasticSearch.…
user1810626
- 61
- 1
- 2
5
votes
3 answers
How to avoid getting older results in AWS cloud trail API call
We are using AWS Cloud Trail to retrieve data (cloud trail events). We have used the gem 'aws-sdk-cloudtrail' (version 1.0). As per Cloud Trail we are able to retrieve maximum 50 results (latest once). To fetch the previous (older once ) results we…
Kalyani Kirad
- 309
- 3
- 12
5
votes
1 answer
How to send Cloudwatch log details via email?
The diagram below is what I am trying to achieve. In brief, to send CloudTrail logs to CloudWatch log group then scan it for certain events and finally send email alerts if there is an concerting event.
I am following this official documentation…
Sushan Ghimire
- 7,307
- 16
- 38
- 65
4
votes
2 answers
Console login events not showing in Cloudtrail
As the title gives it away, I logged into my AWS console today morning but can't see the logs in Cloudtrail for the same.
My question is
a) Is this default behaviour to log AWS console login to Cloudtrail ?
b) What could i possibly have missed ?
Powershel
- 615
- 4
- 11
- 18
4
votes
0 answers
How to view AWS organisation's CloudTrail logs in the security account's CloudWatch?
The AWS CloudTrail logs are being stored into an S3 bucket in the Logs Account. The trail that generates these logs is in the Management Account. I would like the CloudTrail logs to be visible in CloudWatch in my Security Account.
I am (mostly)…
cfogelberg
- 1,468
- 19
- 26
4
votes
0 answers
Can 'codestar connections used' trigger aws event bridge?
Although AWS considers using git webhooks to be antiquated practice, the documentation on aws codestar connections seems to be a bit scarce. I want to create a generic pipeline that can be triggered when a new repository is committed to for the…
Cognitiaclaeves
- 808
- 10
- 16