Triggers a workflow on every new event captured by CloudTrail. Note: Events of type “LookupEvents” are filtered from the polling events.

Workflows based on this trigger will search for new events every 5 minutes.

​
Parameters

ParameterDescription
Event CategorySpecifies the event category. If you do not specify an event category, events of the category are not returned in the response.For example, if you do not specify insight as the value of EventCategory, no Insights events are returned.
Lookup AttributesContains a list of lookup attributes.Currently the list can contain only one item.
RegionRegion for the AWS command.

​
Sample Event

{
	"EventId": "654ccbc0-ba0d-486a-9076-dbf7274677a7",
	"EventName": "DescribeEventAggregates",
	"ReadOnly": "true",
	"AccessKeyId": "ZZZZZZZZZZZZZZZZZZZZ",
	"EventTime": 1737548601,
	"EventSource": "cloudtrail.amazonaws.com",
	"Username": "my-session-name",
	"Resources": [],
	"CloudTrailEvent": "{ \"eventVersion\": \"1.02\", \"userIdentity\": { \"type\": \"AssumedRole\", \"principalId\": \"AROAJIKPFTA72SWU4L7T4:my-session-name\", \"arn\": \"arn:aws:sts::123456789012:assumed-role/my-role/my-session-name\", \"accountId\": \"123456789012\", \"sessionContext\": { \"attributes\": { \"mfaAuthenticated\": \"false\", \"creationDate\": \"2016-01-26T21:42:12Z\" }, \"sessionIssuer\": { \"type\": \"Role\", \"principalId\": \"AROAJIKPFTA72SWU4L7T4\", \"arn\": \"arn:aws:iam::123456789012:role/my-role\", \"accountId\": \"123456789012\", \"userName\": \"my-role\" }}}, \"eventTime\": \"2016-01-26T21:42:12Z\", \"eventSource\": \"signin.amazonaws.com\", \"eventName\": \"ConsoleLogin\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"72.21.198.70\", \"userAgent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36\", \"requestParameters\": null, \"responseElements\": { \"ConsoleLogin\": \"Success\" }, \"additionalEventData\": { \"MobileVersion\": \"No\", \"MFAUsed\": \"No\" }, \"eventID\": \"654ccbc0-ba0d-486a-9076-dbf7274677a7\", \"eventType\": \"AwsConsoleSignIn\", \"recipientAccountId\": \"123456789012\" }"
}

Was this page helpful?