cloudtrail module

Provides parsers for extraction of fields from AWS cloudtrail data.

hutch.security.parsers.cloudtrail.asg_name(trail: str) str[source]

Attempts to extract an Auto Scaling Group name from a trail.

Parameters

trail – An AWS CloudTrail trail as JSON.

Returns

The extracted ASG name.

hutch.security.parsers.cloudtrail.user_identity(trail: str) str[source]

Attempts to extract a valid user identity from a trail.

Parameters

trail – An AWS CloudTrail trail as JSON.

Returns

The extracted user identity.