dagrz

aws cloudtrail describe-trails

dagrz

aws cloudtrail delete-trail --name my-trail

dagrz

aws cloudtrail stop-logging --name my-trail

dagrz

aws cloudtrail update-trail --name my-trail --s3-bucket-name not-my-bucket

dagrz

aws cloudtrail update-trail --name my-trail --no-is-multi-region-trail --no-include-global-service-events

dagrz

{
  "Version": "2012-10-17",
  "Id": "Key policy created for CloudTrail",
  "Statement": [
    {
      "Sid": "Enable IAM User Permissions",
      "Effect": "Allow",
      "Principal": {
        "AWS": "[account-id]/[user-id]"
      },

dagrz

{  
   "Version":"2012-10-17",
   "Statement":[  
      {  
         "Sid":"AWSCloudTrailAclCheck20150319",
         "Effect":"Allow",
         "Principal":{  
            "Service":"cloudtrail.amazonaws.com"
         },
         "Action":"s3:GetBucketAcl",

dagrz

{
    "Owner": {
        "DisplayName": "[user-name]", 
        "ID": "[user-id]"
    }, 
    "Grants": [
        {
            "Grantee": {
                "Type": "CanonicalUser", 
                "DisplayName": "[user-name]", 

dagrz

import json
import urllib
import boto3

s3 = boto3.client('s3')

def lambda_handler(event, context):
    bucket = event['Records'][0]['s3']['bucket']['name']
    key = urllib.unquote_plus(event['Records'][0]['s3']['object']['key']).decode('utf8')
    try:

dagrz

{
  "LambdaFunctionConfigurations": [
    {
      "LambdaFunctionArn": "arn:aws:lambda:[my-region]:[account-id]:function:[my-function]", 
      "Id": "[my-guid]", 
      "Events": [
        "s3:ObjectCreated:*"
      ]
    }
  ]