aws cloudtrail lookup-events

aws cloudtrail lookup-events (aws.com) You can look up events that occurred in a Region within the last 90 days.

--start-time
--max-items
KO --max-results

Examples

• aws cloudtrail lookup-events --max-items 1
• aws cloudtrail lookup-events --max-items 1000 | egrep "EventName|EventTime"
• aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=ConsoleLogin
• aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=CreateBucket --max-items 1

aws cloudtrail lookup-events --region eu-central-1 --lookup-attributes AttributeKey=EventName,AttributeValue=RequestSpotInstances

ChatGPT (pending validation)

aws cloudtrail lookup-events \
  --start-time <start-time> \
  --end-time <end-time> \
  --lookup-attributes AttributeKey=ResourceName,AttributeValue=<instance-id>

aws cloudtrail lookup-events --lookup-attributes AttributeKey=ResourceType,AttributeValue=AWS::S3::Bucket --max-items 1 --output text
(no output)

aws cloudtrail lookup-events --lookup-attributes AttributeKey=ResourceType,AttributeValue=NOT_a_valid_attribute  --max-items 1 --output text
(no output)

Related

• CloudTrail Events
• AWS::

See also

• aws cloudtrail lookup-events, ResourceName, ResourceType
• aws cloudtrail [ get-event-selectors | lookup-events | list-trails | create-trail | add-tags | delete-trail | describe-trails | get-trail-status | put-event-selectors | put-insight-selectors | remove-tags | start-logging | stop-logging | update-trail | validate-logs | create-event-data-store | list-public-keys | list-tags ], Terraform, enable-federation, AWS CloudTrail, Events, AWS CloudTrail Lake