Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
CloudTrail analysis
aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=UserAuthentication | jq '.Events|.[]|.Username' | sort | uniq
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment