AwsCloudTrail resources in ASFF - Amazon Security Hub
AwsCloudTrailTrail
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AwsCloudTrail resources in ASFF

The following are examples of the Amazon Security Finding Format (ASFF) syntax for AwsCloudTrail resources.

Amazon Security Hub normalizes findings from various sources into ASFF. For background information about ASFF, see Amazon Security Finding Format (ASFF).

AwsCloudTrailTrail

The AwsCloudTrailTrail object provides details about a Amazon CloudTrail trail.

The following is an example AwsCloudTrailTrail finding in the Amazon Security Finding Format (ASFF). To view descriptions of AwsCloudTrailTrail attributes, see AwsCloudTrailTrailDetails in the Amazon Security Hub API Reference.

Example

"AwsCloudTrailTrail": {
    "CloudWatchLogsLogGroupArn": "arn:aws-cn:logs:us-west-2:123456789012:log-group:CloudTrail/regression:*",
    "CloudWatchLogsRoleArn": "arn:aws-cn:iam::866482105055:role/CloudTrail_CloudWatchLogs",
    "HasCustomEventSelectors": true,
    "HomeRegion": "us-west-2",
    "IncludeGlobalServiceEvents": true,
    "IsMultiRegionTrail": true,
    "IsOrganizationTrail": false,
    "KmsKeyId": "kmsKeyId",
    "LogFileValidationEnabled": true,
    "Name": "regression-trail",
    "S3BucketName": "cloudtrail-bucket",
    "S3KeyPrefix": "s3KeyPrefix",
    "SnsTopicArn": "arn:aws-cn:sns:us-east-2:123456789012:MyTopic",
    "SnsTopicName": "snsTopicName",
    "TrailArn": "arn:aws-cn:cloudtrail:us-west-2:123456789012:trail"
}