**To look up events for a trail** The following ``lookup-events`` command looks up API activity events by the attribute ``EventName``:: aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=ConsoleLogin Output:: { "Events": [ { "EventId": "654ccbc0-ba0d-486a-9076-dbf7274677a7", "Username": "my-session-name", "EventTime": "2021-11-18T09:41:02-08:00", "CloudTrailEvent": "{\"eventVersion\":\"1.02\",\"userIdentity\":{\"type\":\"AssumedRole\",\"principalId\":\"AROAJIKPFTA72SWU4L7T4:my-session-name\",\"arn\":\"arn:aws:sts::123456789012:assumed-role/my-role/my-session-name\",\"accountId\":\"123456789012\",\"sessionContext\":{\"attributes\":{\"mfaAuthenticated\":\"false\",\"creationDate\":\"2016-01-26T21:42:12Z\"},\"sessionIssuer\":{\"type\":\"Role\",\"principalId\":\"AROAJIKPFTA72SWU4L7T4\",\"arn\":\"arn:aws:iam::123456789012:role/my-role\",\"accountId\":\"123456789012\",\"userName\":\"my-role\"}}},\"eventTime\":\"2016-01-26T21:42:12Z\",\"eventSource\":\"signin.amazonaws.com\",\"eventName\":\"ConsoleLogin\",\"awsRegion\":\"us-east-1\",\"sourceIPAddress\":\"72.21.198.70\",\"userAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36\",\"requestParameters\":null,\"responseElements\":{\"ConsoleLogin\":\"Success\"},\"additionalEventData\":{\"MobileVersion\":\"No\",\"MFAUsed\":\"No\"},\"eventID\":\"654ccbc0-ba0d-486a-9076-dbf7274677a7\",\"eventType\":\"AwsConsoleSignIn\",\"recipientAccountId\":\"123456789012\"}", "EventName": "ConsoleLogin", "Resources": [] } ] }
Name | Type | Size | Permission | Actions |
---|---|---|---|---|
add-tags.rst | File | 244 B | 0644 |
|
create-trail.rst | File | 513 B | 0644 |
|
delete-trail.rst | File | 149 B | 0644 |
|
describe-trails.rst | File | 1.31 KB | 0644 |
|
get-event-selectors.rst | File | 451 B | 0755 |
|
get-trail-status.rst | File | 825 B | 0644 |
|
list-public-keys.rst | File | 890 B | 0644 |
|
list-tags.rst | File | 953 B | 0644 |
|
lookup-events.rst | File | 1.67 KB | 0644 |
|
put-event-selectors.rst | File | 2.94 KB | 0755 |
|
remove-tags.rst | File | 252 B | 0644 |
|
start-logging.rst | File | 159 B | 0644 |
|
stop-logging.rst | File | 153 B | 0644 |
|
update-trail.rst | File | 472 B | 0644 |
|
validate-logs.rst | File | 583 B | 0644 |
|