Difference between revisions of "Aws cloudtrail lookup-events"

From wikieduonline
Jump to navigation Jump to search
Line 7: Line 7:
 
* <code>[[aws cloudtrail]] lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=[[ConsoleLogin]]</code>
 
* <code>[[aws cloudtrail]] lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=[[ConsoleLogin]]</code>
 
* <code>aws cloudtrail lookup-events --lookup-attributes AttributeKey=[[EventName]],AttributeValue=[[CreateBucket]] --max-items 1</code>
 
* <code>aws cloudtrail lookup-events --lookup-attributes AttributeKey=[[EventName]],AttributeValue=[[CreateBucket]] --max-items 1</code>
 +
 +
 +
[[ChatGPT]] (pending validation)
 +
aws cloudtrail lookup-events \
 +
  --start-time <start-time> \
 +
  --end-time <end-time> \
 +
  --lookup-attributes AttributeKey=ResourceName,[[AttributeValue]]=<instance-id>
 +
  
  

Revision as of 15:29, 23 January 2024

  • aws cloudtrail lookup-events
  • aws cloudtrail lookup-events --max-results 1
  • aws cloudtrail lookup-events --max-results 1000 | egrep "EventName|EventTime"
  • aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=ConsoleLogin
  • aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=CreateBucket --max-items 1


ChatGPT (pending validation)

aws cloudtrail lookup-events \
  --start-time <start-time> \
  --end-time <end-time> \
  --lookup-attributes AttributeKey=ResourceName,AttributeValue=<instance-id>


aws cloudtrail lookup-events --lookup-attributes AttributeKey=ResourceType,AttributeValue=AWS::S3::Bucket --max-items 1 --output text
(no output)
aws cloudtrail lookup-events --lookup-attributes AttributeKey=ResourceType,AttributeValue=NOT_a_valid_attribute  --max-items 1 --output text
(no output)

Related

See also

Advertising: