duo-labs / duo-labs/cloudtracker
cloudtrail_supported_actions contains actions that are not actually logged to cloudtrail
Open
- Dominant language
- Python
- Stars
- 912
- Forks
- 108
- PR merge metrics
- No merged PRs in 30d
Description
At least, sqs:ReceiveMessage (and various other sqs APIs) do not actually appear in cloudtrail. The only sqs related ones I actually see in cloudtrail across several accounts over the past 30 days are `sqs:CreateQueue`, `sqs:DeleteQueue`, `sqs:PurgeQueue`, and `sqs:SetQueueAttributes`.
I imagine there are others that are incorrectly present in this list.
I know that this list was updated ~3 months ago. Maybe the procedure for generating/verifying that list's accuracy could be improved or revisited?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.