How can I search CloudTrail event history to determine how a security group or resource was changed?

7 Views

Thanks! Share it with your friends!

You disliked this video. Thanks for the feedback!

Published Feb 17, 2025

Skip directly to the demo: 0:27

For more details see the Knowledge Center article with this video: https://repost.aws/knowledge-center/cloudtrail-event-history-changed

Aditya shows you how to search a CloudTrail event history to determine how a security group or resource was changed.

0:00 Introduction
0:27 API calls that are related to a security group event
1:02 Using AWS CloudTrail event history to view security group event details
1:52 Using Athena queries to search CloudTrail logs for security group event history
3:30 Using AWS config configuration history to check the event history
4:27 Ending