duo-labs / duo-labs/cloudtracker
Use sharedEventID
Open
enhancement
- Dominant language
- Python
- Stars
- 912
- Forks
- 108
- PR merge metrics
- No merged PRs in 30d
Description
In tracking cross-account role assumptions, I should use sharedEventID as explained in https://aws.amazon.com/blogs/security/aws-cloudtrail-now-tracks-cross-account-activity-to-its-origin/
This should be fixed at:
https://github.com/duo-labs/cloudtracker/blob/33852a6f70e839b357b62722b66a2e317c440943/cloudtracker/datasources/es.py#L135
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.