Skip to content

Instantly share code, notes, and snippets.

@klang

klang/cloudtrail-unique-users.sh

Created June 7, 2021 08:27
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save klang/007312d0daea6583847ab1f521e29408 to your computer and use it in GitHub Desktop.
Save klang/007312d0daea6583847ab1f521e29408 to your computer and use it in GitHub Desktop.
Download ZIP
CloudTrail analysis
Raw
cloudtrail-unique-users.sh
aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=UserAuthentication | jq '.Events|.[]|.Username' | sort | uniq
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment