aws-summarize-account-activity

A Python-based tool that analyzes AWS CloudTrail data to generate comprehensive summaries of account activity. The tool examines IAM principal activities, API calls, regions, IP addresses, and user agents within a specified timeframe. Key features include: - Analysis of CloudTrail data for recently active IAM principals - Tracking of API calls made by different principals - Identification of regions, IP addresses, and user agents used - Configurable analysis timeframe (1 hour to 90 days, default 14 days) - Support for analyzing all API calls, successful calls only, or failed calls only - JSON output format for structured data export - Optional PNG visualization generation for graphical representation - Raw CloudTrail data export capability in JSONL format - Support for AWS named profiles and environment variable credentials The tool requires proper AWS credentials configuration and CloudTrail access permissions to function. It processes historical CloudTrail logs to provide insights into account usage patterns and security-relevant activities across AWS services and regions.