Skip to main content

insights_datas

Creates, updates, deletes, gets or lists an insights_datas resource.

Overview

Nameinsights_datas
TypeResource
Idaws.cloudtrail.insights_datas

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
access_key_idstringThe Amazon Web Services access key ID that was used to sign the request. If the request was made with temporary security credentials, this is the access key ID of the temporary credentials.
cloud_trail_eventstringA JSON string that contains a representation of the event returned.
event_idstringThe CloudTrail ID of the event returned.
event_namestringThe name of the event returned.
event_sourcestringThe Amazon Web Services service to which the request was made.
event_timestring (date-time)The date and time of the event returned.
read_onlystringInformation about whether the event is a write event or a read event.
resourcesarrayA list of resources referenced by the event returned.
usernamestringA user name or role name of the requester that called the API in the event returned.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
list_insights_dataselectregionReturns Insights events generated on a trail that logs data events. You can list Insights events that occurred in a Region within the last 90 days. ListInsightsData supports the following Dimensions for Insights events: Event ID Event name Event source All dimensions are optional. The default number of results returned is 50, with a maximum of 50 possible. The response includes a token that you can use to get the next page of results. The rate of ListInsightsData requests is limited to two per second, per account, per Region. If this limit is exceeded, a throttling error occurs.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
regionstringAWS region (default: us-east-1)

SELECT examples

Returns Insights events generated on a trail that logs data events. You can list Insights events that occurred in a Region within the last 90 days. ListInsightsData supports the following Dimensions for Insights events: Event ID Event name Event source All dimensions are optional. The default number of results returned is 50, with a maximum of 50 possible. The response includes a token that you can use to get the next page of results. The rate of ListInsightsData requests is limited to two per second, per account, per Region. If this limit is exceeded, a throttling error occurs.

SELECT
access_key_id,
cloud_trail_event,
event_id,
event_name,
event_source,
event_time,
read_only,
resources,
username
FROM aws.cloudtrail.insights_datas
WHERE region = '{{ region }}' -- required
;