{"id":3011,"date":"2019-08-31T11:17:22","date_gmt":"2019-08-31T11:17:22","guid":{"rendered":"https:\/\/www.testpreptraining.com\/tutorial\/?page_id=3011"},"modified":"2020-05-01T11:09:26","modified_gmt":"2020-05-01T11:09:26","slug":"cloudtrail-events-2","status":"publish","type":"page","link":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/","title":{"rendered":"CloudTrail Events"},"content":{"rendered":"\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"185\" src=\"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/09\/image-134.png\" alt=\"\" class=\"wp-image-3701\"\/><\/figure>\n\n\n\n<p><strong>Data Events<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Enlists all operations on a AWS resource<\/li><li>Also as data plane operations<\/li><li>are high-volume activities.<\/li><\/ul>\n\n\n\n<p>Example data events are<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Amazon S3 object-level API activity (for example, GetObject, DeleteObject, and PutObject API operations)<\/li><li>Lambda function execution activity<\/li><li>During trail creation, by default data events are disabled.<\/li><li>For recording data events, add supported resources or resource types to collect activity to a trail.<\/li><\/ul>\n\n\n\n<p><strong>Management Events<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Give details to management operations on AWS resources<\/li><li>Also called as control plane operations.<\/li><li>Example management events include:\n<ul>\n<li>Configuring security (for example, IAM AttachRolePolicy API operations)<\/li>\n<\/ul>\n<ul>\n<li>Registering devices (for example, Amazon EC2 CreateDefaultVpc API operations)<\/li>\n<\/ul>\n<ul>\n<li>Configuring rules for routing data (for example, Amazon EC2 CreateSubnet API operations)<\/li>\n<\/ul>\n<ul>\n<li>Setting up logging (for example, AWS CloudTrail CreateTrail API operations)<\/li>\n<\/ul>\n<\/li><li>Can also include non-API events occurring in account\n<ul>\n<li>For example, when a user logs in to account, CloudTrail logs the ConsoleLogin event.<\/li>\n<\/ul>\n<\/li><\/ul>\n\n\n\n<p><strong>Read-only and Write-only Events<\/strong><\/p>\n\n\n\n<p>When you configure trail to log data and management events, you can specify whether you want read-only events, write-only events, both, or none.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Read-only &#8211; Read-only events include API operations that read resources, but don&#8217;t make changes. For example, Amazon EC2 DescribeSecurityGroups and DescribeSubnets API operations, return only information on EC2 resources and don&#8217;t change configurations.<\/li><li>Write-only &#8211; Write-only events include API operations that modify (or might modify) resources. For example, the Amazon EC2 RunInstances and TerminateInstances API operations modify instances.<\/li><li>All &#8211; trail logs both.<\/li><li>None &#8211; trail logs neither read-only nor write-only management events.<\/li><\/ul>\n\n\n\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Data Events Enlists all operations on a AWS resource Also as data plane operations are high-volume activities. Example data events are Amazon S3 object-level API activity (for example, GetObject, DeleteObject, and PutObject API operations) Lambda function execution activity During trail creation, by default data events are disabled. For recording data events, add supported resources or&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":2474,"menu_order":16,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"categories":[2],"tags":[7,406],"class_list":["post-3011","page","type-page","status-publish","hentry","category-amazon-aws","tag-aws","tag-cloudtrail-events"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>CloudTrail Events | Tutorials | AWS | Testprep Training<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CloudTrail Events | Tutorials | AWS | Testprep Training\" \/>\n<meta property=\"og:description\" content=\"Data Events Enlists all operations on a AWS resource Also as data plane operations are high-volume activities. Example data events are Amazon S3 object-level API activity (for example, GetObject, DeleteObject, and PutObject API operations) Lambda function execution activity During trail creation, by default data events are disabled. For recording data events, add supported resources or...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Testprep Training Tutorials\" \/>\n<meta property=\"article:modified_time\" content=\"2020-05-01T11:09:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/09\/image-134.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/\",\"url\":\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/\",\"name\":\"CloudTrail Events | Tutorials | AWS | Testprep Training\",\"isPartOf\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#website\"},\"datePublished\":\"2019-08-31T11:17:22+00:00\",\"dateModified\":\"2020-05-01T11:09:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.testpreptraining.ai\/tutorial\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AWS Certified Security Specialty\",\"item\":\"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"CloudTrail Events\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#website\",\"url\":\"https:\/\/www.testpreptraining.ai\/tutorial\/\",\"name\":\"Testprep Training Tutorials\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.testpreptraining.ai\/tutorial\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#organization\",\"name\":\"Testprep Training\",\"url\":\"https:\/\/www.testpreptraining.ai\/tutorial\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png\",\"contentUrl\":\"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png\",\"width\":583,\"height\":153,\"caption\":\"Testprep Training\"},\"image\":{\"@id\":\"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CloudTrail Events | Tutorials | AWS | Testprep Training","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/","og_locale":"en_US","og_type":"article","og_title":"CloudTrail Events | Tutorials | AWS | Testprep Training","og_description":"Data Events Enlists all operations on a AWS resource Also as data plane operations are high-volume activities. Example data events are Amazon S3 object-level API activity (for example, GetObject, DeleteObject, and PutObject API operations) Lambda function execution activity During trail creation, by default data events are disabled. For recording data events, add supported resources or...","og_url":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/","og_site_name":"Testprep Training Tutorials","article_modified_time":"2020-05-01T11:09:26+00:00","og_image":[{"url":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-content\/uploads\/2019\/09\/image-134.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/","url":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/","name":"CloudTrail Events | Tutorials | AWS | Testprep Training","isPartOf":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#website"},"datePublished":"2019-08-31T11:17:22+00:00","dateModified":"2020-05-01T11:09:26+00:00","breadcrumb":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/cloudtrail-events-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.testpreptraining.ai\/tutorial\/"},{"@type":"ListItem","position":2,"name":"AWS Certified Security Specialty","item":"https:\/\/www.testpreptraining.ai\/tutorial\/aws-certified-security-specialty\/"},{"@type":"ListItem","position":3,"name":"CloudTrail Events"}]},{"@type":"WebSite","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#website","url":"https:\/\/www.testpreptraining.ai\/tutorial\/","name":"Testprep Training Tutorials","description":"","publisher":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.testpreptraining.ai\/tutorial\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#organization","name":"Testprep Training","url":"https:\/\/www.testpreptraining.ai\/tutorial\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/","url":"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png","contentUrl":"https:\/\/www.testpreptraining.com\/tutorial\/wp-content\/uploads\/2020\/07\/tpt-logo-6.png","width":583,"height":153,"caption":"Testprep Training"},"image":{"@id":"https:\/\/www.testpreptraining.ai\/tutorial\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages\/3011","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/comments?post=3011"}],"version-history":[{"count":5,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages\/3011\/revisions"}],"predecessor-version":[{"id":5133,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages\/3011\/revisions\/5133"}],"up":[{"embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/pages\/2474"}],"wp:attachment":[{"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/media?parent=3011"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/categories?post=3011"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.testpreptraining.ai\/tutorial\/wp-json\/wp\/v2\/tags?post=3011"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}