duo-labs / duo-labs/cloudtracker

cloudtrail_supported_actions contains actions that are not actually logged to cloudtrail

Open
#62 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
912
Forks
108
PR merge metrics
No merged PRs in 30d

Description

At least, sqs:ReceiveMessage (and various other sqs APIs) do not actually appear in cloudtrail. The only sqs related ones I actually see in cloudtrail across several accounts over the past 30 days are `sqs:CreateQueue`, `sqs:DeleteQueue`, `sqs:PurgeQueue`, and `sqs:SetQueueAttributes`.

I imagine there are others that are incorrectly present in this list.

I know that this list was updated ~3 months ago. Maybe the procedure for generating/verifying that list's accuracy could be improved or revisited?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.