aws cloudtrail lookup-events

• https://awscli.amazonaws.com/v2/documentation/api/latest/reference/cloudtrail/lookup-events.html

• aws cloudtrail lookup-events
• aws cloudtrail lookup-events --max-results 1
• aws cloudtrail lookup-events --max-results 1000 | egrep "EventName|EventTime"
• aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=ConsoleLogin
• aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=CreateBucket --max-items 1

ChatGPT (pending validation)

aws cloudtrail lookup-events \
  --start-time <start-time> \
  --end-time <end-time> \
  --lookup-attributes AttributeKey=ResourceName,AttributeValue=<instance-id>

aws cloudtrail lookup-events --lookup-attributes AttributeKey=ResourceType,AttributeValue=AWS::S3::Bucket --max-items 1 --output text
(no output)

aws cloudtrail lookup-events --lookup-attributes AttributeKey=ResourceType,AttributeValue=NOT_a_valid_attribute  --max-items 1 --output text
(no output)

Related

• CloudTrail Events

See also

• aws cloudtrail lookup-events, ResourceName, ResourceType
• AWS CloudTrail Events, aws cloudtrail lookup-events, TerminateInstances, StopInstances
• AWS CloudTrail: aws cloudtrail [ get-event-selectors | lookup-events | list-trails ]