Skip to main content

New CloudTrail Event

Triggers a workflow on every new event captured by CloudTrail. Note: Events of type "LookupEvents" are filtered from the polling events.

info

Automations based on this trigger will search for new events every 5 minutes.

Parameters

ParameterDescription
RegionRegion for the AWS command.

Sample Event

{
"EventId": "654ccbc0-ba0d-486a-9076-dbf7274677a7",
"EventName": "DescribeEventAggregates",
"ReadOnly": "true",
"AccessKeyId": "ZZZZZZZZZZZZZZZZZZZZ",
"EventTime": "2021-11-18T09:41:02-08:00",
"EventSource": "cloudtrail.amazonaws.com",
"Username": "my-session-name",
"Resources": [],
"CloudTrailEvent": "{ \"eventVersion\": \"1.02\", \"userIdentity\": { \"type\": \"AssumedRole\", \"principalId\": \"AROAJIKPFTA72SWU4L7T4:my-session-name\", \"arn\": \"arn:aws:sts::123456789012:assumed-role/my-role/my-session-name\", \"accountId\": \"123456789012\", \"sessionContext\": { \"attributes\": { \"mfaAuthenticated\": \"false\", \"creationDate\": \"2016-01-26T21:42:12Z\" }, \"sessionIssuer\": { \"type\": \"Role\", \"principalId\": \"AROAJIKPFTA72SWU4L7T4\", \"arn\": \"arn:aws:iam::123456789012:role/my-role\", \"accountId\": \"123456789012\", \"userName\": \"my-role\" }}}, \"eventTime\": \"2016-01-26T21:42:12Z\", \"eventSource\": \"signin.amazonaws.com\", \"eventName\": \"ConsoleLogin\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"72.21.198.70\", \"userAgent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36\", \"requestParameters\": null, \"responseElements\": { \"ConsoleLogin\": \"Success\" }, \"additionalEventData\": { \"MobileVersion\": \"No\", \"MFAUsed\": \"No\" }, \"eventID\": \"654ccbc0-ba0d-486a-9076-dbf7274677a7\", \"eventType\": \"AwsConsoleSignIn\", \"recipientAccountId\": \"123456789012\" }"
}