Skip to content

Instantly share code, notes, and snippets.

@MrHassanMurtaza
Created January 24, 2020 12:52
Show Gist options
  • Save MrHassanMurtaza/02be4be41e00b88620b38e1c1522c1df to your computer and use it in GitHub Desktop.
Save MrHassanMurtaza/02be4be41e00b88620b38e1c1522c1df to your computer and use it in GitHub Desktop.
Audit Routetable changes using CloudTrail and Athena
SELECT eventname, useridentity.username, sourceIPAddress, eventtime, requestparameters
FROM cloudtrail_logs_athena_table
WHERE (requestparameters like '%rtb-xxxxxxx%') limit 10;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment