AWS - CloudTrail

Amazon Web Services CloudTrail.

Category

IT Services

Pack

AWS-CloudTrail

Configuration parameters

• defaultRegion — AWS Default Region
• roleArn — Role Arn
• roleSessionName — Role Session Name
• sessionDuration — Role Session Duration
• credentials — Access Key
• access_key — Access Key
• secret_key — Secret Key
• sts_regional_endpoint — AWS STS Regional Endpoints
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (8)

• aws-cloudtrail-create-trail — Creates a trail that specifies the settings for delivery of log data to an Amazon S3 bucket. A maximum of five trails can exist in a region, irrespective of the region in which they were created.
• aws-cloudtrail-delete-trail — Deletes a trail. This operation must be called from the region in which the trail was created. DeleteTrail cannot be called on the shadow trails (replicated trails in other regions) of a trail that is enabled in all regions.
• aws-cloudtrail-describe-trails — Retrieves settings for the trail associated with the current region for your account.
• aws-cloudtrail-get-trail-status — Returns a JSON-formatted list of information about the specified trail. Fields include information on delivery errors, Amazon SNS and Amazon S3 errors, and start and stop logging times for each trail.
• aws-cloudtrail-lookup-events — Looks up API activity events captured by CloudTrail that create, update, or delete resources in your account. Events for a region can be looked up for the times in which you had CloudTrail turned on in that region during the last seven days.
• aws-cloudtrail-start-logging — Starts the recording of AWS API calls and log file delivery for a trail. For a trail that is enabled in all regions, this operation must be called from the region in which the trail was created. This operation cannot be called on the shadow trails (replicated trails in other regions) of a trail that is enabled in all regions.
• aws-cloudtrail-stop-logging — Suspends the recording of AWS API calls and log file delivery for the specified trail. Under most circumstances, there is no need to use this action. You can update a trail without stopping it first. This action is the only way to stop recording. For a trail enabled in all regions, this operation must be called from the region in which the trail was created, or an InvalidHomeRegionException will occur. This operation cannot be called on the shadow trails (replicated trails in other regions) of a trail enabled in all regions.
• aws-cloudtrail-update-trail — Updates the settings that specify delivery of log files. Changes to a trail do not require stopping the CloudTrail service.