Discover Events

Discover events by name.

Source code • Permissions

If created_before and created_after are not supplied, events are fetched for the last 90 days.

For a list of event names, see Event Names.

Usage

Input

Parameter Description Type Required Default Value
event Search for this event string Yes None
created_after Search for events created after this time. (YYYY/MM/DD) string No None
created_before Search for events created before this time. (YYYY/MM/DD) string No None
region Region for operation. Leave blank for session default string No Session Default
debug Increase log verbosity bool No False
silent Decrease log verbosity bool No False
output Output format
table		 string No None
session Established session object No None

Output

Returns a list of objects containing discovered events:

[
    {
        'UserName': 'foo',
        'EventTime': '2021-01-01T00:00:00Z',
        'EventName': 'DetachVolume',
        'Resources': '["vol-1234567890abcdef0", "i-1234567890abcdef0"]'
    }
]

Examples

Discover ‘TerminateInstances’ events created in the last 90 days in eu-west-2:

aaws cloudtrail discover_events --event TerminateInstances --region eu-west-2

Discover ‘DetachVolume’ events between Jan 5, 2024 and Jan 10, 2024 in eu-west-2:

aaws cloudtrail discover_events --event DetachVolume --created_before 2024/01/10 --created_after 2024/01/05 --region eu-west-2