Skip to content

Instantly share code, notes, and snippets.

@sneak
Created June 5, 2015 09:14
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sneak/691804298026cda3473d to your computer and use it in GitHub Desktop.
Save sneak/691804298026cda3473d to your computer and use it in GitHub Desktop.
analyze cloudtrail json logs to find api calls made
#!/bin/bash
find . -iname '*.json' | \
xargs -P 8 jq -c '.Records[] | [ .userIdentity.arn, .userIdentity.userName, .eventName ]' \
>> out
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment