cwl-*


cloudtrail_consoleLoginFailed

cloudtrail_consoleLoginFailed

Question: responseElements.ConsoleLogin:Failure


cloudtrail_rootLogin

cloudtrail_rootLogin

Question: userIdentity.type:Root AND NOT userIdentity.invokedBy:* AND NOT eventType:AwsServiceEvent


cloudtrail_unauthorizedApiCalls

cloudtrail_unauthorizedApiCalls

Question: errorCode:*UnauthorizedOperation OR errorCode:AccessDenied*


cloudtrail_userIdentityTable

cloudtrail_userIdentityTable


cloudtrail_errorCodePie

cloudtrail_errorCodePie


cloudtrail_eventNameArea

cloudtrail_eventNameArea

Count


cloudtrail_eventTypePie

cloudtrail_eventTypePie


cloudtrail_eventSourcePie

cloudtrail_eventSourcePie


UsageDetector - General


Lambda invoke distribution per day per functionName

Question: Invoke

lambda-invoke-per_function

lambda-invoke-per_function

Count


Lambda invoke distribution per day per service arn

lambda-invoke-per_serviceArn

lambda-invoke-per_serviceArn

Count


Lambda invoke distribution per day per user name / role

Question: Invoke

lambda-invoke-per_userrole

lambda-invoke-per_userrole

Count


UsageDetector - Lambda


Ec2 RunInstances distribution per day for instancesMaxCount per instances type(s)

Question: RunInstances

Count


Ec2 RunInstances distribution per day per user / role

Question: RunInstances

ec2-runInstaces-per_userrole

ec2-runInstaces-per_userrole

Count


UsageDetector - EC2


Ebs CreateVolume distribution per day per user / role

Question: CreateVolume

ebs-createVolume_per_userrole

ebs-createVolume_per_userrole

Count


UsageDetector - EBS