aws / aws/aws-cdk

(aws-cdk/aws-cloudtrail): Support DynamoDB as a DataResourceType in CloudTrail

Open
#14,886 14 comments 20 reactions 0 assignees View on GitHub
@aws-cdk/aws-cloudtrail effort/small feature-request p3 service-api
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
1d 19h
Merged PRs (30d)
74

Description

About two months ago, AWS CloudTrail officially announced support for audit logging and monitoring of DynamoDb. More information about that [here](https://aws.amazon.com/blogs/database/amazon-dynamodb-now-supports-audit-logging-and-monitoring-using-aws-cloudtrail/).
Today the aws-cdk only supports S3 and Lambda as data resource types and it would be super useful to be able to use cdk to construct our CloudTrail trails for DynamoDB as well.

* [ ] :wave: I may be able to implement this feature request
* [ ] :warning: This feature might incur a breaking change

---

This is a :rocket: Feature Request

Contributor guide

Open the contributing guide

Research direction

Start by locating the TypeScript aws-cloudtrail implementation that currently supports S3 and Lambda data resource types, then compare its handling with the AWS CloudTrail DynamoDB announcement linked in the issue. Done means CDK can construct CloudTrail trails with DynamoDB data resources while retaining existing S3 and Lambda support.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.