Difference between revisions of "S3.amazonaws.com"
Jump to navigation
Jump to search
(Created page with " {{Data lake example query}}") |
|||
| Line 3: | Line 3: | ||
{{Data lake example query}} | {{Data lake example query}} | ||
| + | |||
| + | |||
| + | {{ct}} | ||
Revision as of 06:27, 11 July 2024
select userIdentity.arn as user, element_at(requestParameters, 'bucketName') as bucket, element_at(requestParameters, 'key') as key, count(*) as attempts from xxxxx-yyyyy-xxxxx-zzzz-xxxxx where eventSource = 's3.amazonaws.com' and eventName = 'GetObject' and userIdentity.arn = 'arn:aws:sts::0987654321:assumed-role/your-role/[email protected]' group by 1, 2, 3 order by attempts desc
AWS CloudTrail, AWS CloudTrail Insights, CloudTrail Events, AWS CloudTrail Lake, Terraform, Best practices, Datadog SIEM Content Packs for Cloudtrail
Advertising:
