Document toolboxDocument toolbox

cloud.aws.cloudtrail.events

Owned by Juan Tomás Alonso Nieto (Deactivated)
May 08, 2023
2 min read
[ 1 Tag structure ] [ 2 Download your Devo domain certificate files ] [ 3 Set up the CloudTrail trail ] [ 4 Forwarding the events ]

The cloud.aws.cloudtrail.events tag identifies log events generated by the Amazon CloudTrail service. For more information about CloudTrail and this kind of information it makes available to you, consult the vendor documentation.

Tag structure

The tag has four levels which are fixed as cloud.aws.cloudtrail.events. All events sent with this tag are saved in a Devo data table of the same name.

For more information, read more about Devo tags.

Download your Devo domain certificate files

Log into the Devo web application, go to Administration → Credentials → X.509 Certificates and download the X.509 Certificate and Private Key. These will be used later.

Set up the CloudTrail trail

  1. Log into your AWS Console, go to CloudTrail → Trails. Click Create trail. 

  2. Enter a Name for the new trail like awsMonitoring. Choose Yes for Apply trail to all regions.

  3. Under Management events, choose All for Read/Write events. 

  4. Under Data events - S3, select the Select all S3 buckets in your account checkbox. Do nothing in the Lambda tab.

  5. Under Storage location, choose Yes for Create a new S3 bucket and enter a name for the new bucket. We suggest cloudtrail-aws-monitoring. You can accept the default values in the Advanced settings.

  6. Click Create. 

Forwarding the events

After setting up your CloudTrail trail, you can start forwarding your events using either Node.js or Python:

Related articles