aws cloudtrail lookup-events

• https://awscli.amazonaws.com/v2/documentation/api/latest/reference/cloudtrail/lookup-events.html

• aws cloudtrail lookup-events
• aws cloudtrail lookup-events --max-results 1
• aws cloudtrail lookup-events --max-results 1000 | egrep "EventName|EventTime"
• aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=ConsoleLogin
• aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=CreateBucket --max-items 1

ChatGPT (pending validation)

aws cloudtrail lookup-events \
  --start-time <start-time> \
  --end-time <end-time> \
  --lookup-attributes AttributeKey=ResourceName,AttributeValue=<instance-id>

aws cloudtrail lookup-events --lookup-attributes AttributeKey=ResourceType,AttributeValue=AWS::S3::Bucket --max-items 1 --output text
(no output)

aws cloudtrail lookup-events --lookup-attributes AttributeKey=ResourceType,AttributeValue=NOT_a_valid_attribute  --max-items 1 --output text
(no output)

Related

• CloudTrail Events

See also

• aws cloudtrail [ get-event-selectors | lookup-events | list-trails | create-trail | add-tags | delete-trail | describe-trails | get-trail-status | put-event-selectors | put-insight-selectors | remove-tags | start-logging | stop-logging | update-trail | validate-logs | create-event-data-store | list-public-keys | list-tags ], Terraform, enable-federation,AWS CloudTrail, Events