AWS CloudTrail
Version: 1.2
Updated: Jun 15, 2023
Interact with AWS CloudTrail through Trails and Events.
Actions​
- Describe Trails (Enrichment) - Retrieves settings for the trail associated with the current region for an AWS account.
- Lookup Events (Enrichment) - Looks up management events captured by CloudTrail.
- Create Trail (Enrichment) - Creates a trail that specifies the settings for delivery of log data to an Amazon S3 bucket.
- Delete Trail (Containment) - Deletes a trail.
- Start Logging (Enrichment) - Starts the recording of AWS API calls and log file delivery for a trail.
- Stop Logging (Enrichment) - Suspends the recording of AWS API calls and log file delivery for the specified trail.
- Update Trail (Enrichment) - Updates the settings that specify delivery of log files.
- List Trail (Enrichment) - Lists trails that are in the current account.
External Libraries​
Configure AWS CloudTrail in Automation Service and Cloud SOAR​
Before you can use the integration, you must configure it so that the vendor can communicate with Sumo Logic. For general guidance, see Configure Authentication for Integrations.
Change Log​
- October 1, 2019 - First upload
- March 10, 2022 - Logo
- May 12, 2023 (v1.1) - Integration refactored
- June 15, 2023 (v1.2) - Updated the integration with Environmental Variables