CybersecTools API access is now live!Learn More
aws-summarize-account-activity Logo

aws-summarize-account-activity

A Python tool that analyzes AWS CloudTrail data to summarize IAM principal activities, API calls, regions, IP addresses, and user agents with configurable timeframes and visualization options.

164
0

aws-summarize-account-activity Description

A Python-based tool that analyzes AWS CloudTrail data to generate comprehensive summaries of account activity. The tool examines IAM principal activities, API calls, regions, IP addresses, and user agents within a specified timeframe. Key features include: - Analysis of CloudTrail data for recently active IAM principals - Tracking of API calls made by different principals - Identification of regions, IP addresses, and user agents used - Configurable analysis timeframe (1 hour to 90 days, default 14 days) - Support for analyzing all API calls, successful calls only, or failed calls only - JSON output format for structured data export - Optional PNG visualization generation for graphical representation - Raw CloudTrail data export capability in JSONL format - Support for AWS named profiles and environment variable credentials The tool requires proper AWS credentials configuration and CloudTrail access permissions to function. It processes historical CloudTrail logs to provide insights into account usage patterns and security-relevant activities across AWS services and regions.

aws-summarize-account-activity FAQ

Common questions about aws-summarize-account-activity including features, pricing, alternatives, and user reviews.

aws-summarize-account-activity is A Python tool that analyzes AWS CloudTrail data to summarize IAM principal activities, API calls, regions, IP addresses, and user agents with configurable timeframes and visualization options.. It is a Security Operations solution designed to help security teams with Visualization, Security Analysis, Monitoring.

Have more questions? Browse our categories or search for specific tools.