{"id":25531224,"url":"https://github.com/guessi/cloudtrail-cli","last_synced_at":"2025-10-12T00:44:03.849Z","repository":{"id":81889505,"uuid":"605697283","full_name":"guessi/cloudtrail-cli","owner":"guessi","description":"Blazing fast single purpose cli for CloudTrail log filtering","archived":false,"fork":false,"pushed_at":"2025-10-08T02:49:42.000Z","size":122,"stargazers_count":25,"open_issues_count":0,"forks_count":3,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-10-08T04:23:16.325Z","etag":null,"topics":["aws","cli","cloudtrail","github-actions","golang"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/guessi.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2023-02-23T17:55:28.000Z","updated_at":"2025-10-08T02:49:46.000Z","dependencies_parsed_at":"2023-12-16T17:21:48.620Z","dependency_job_id":"f7a4b14e-ec3a-4e20-a620-8bb2ba5807af","html_url":"https://github.com/guessi/cloudtrail-cli","commit_stats":null,"previous_names":[],"tags_count":24,"template":false,"template_full_name":null,"purl":"pkg:github/guessi/cloudtrail-cli","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/guessi%2Fcloudtrail-cli","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/guessi%2Fcloudtrail-cli/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/guessi%2Fcloudtrail-cli/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/guessi%2Fcloudtrail-cli/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/guessi","download_url":"https://codeload.github.com/guessi/cloudtrail-cli/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/guessi%2Fcloudtrail-cli/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279001778,"owners_count":26083173,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-09T02:00:07.460Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","cli","cloudtrail","github-actions","golang"],"created_at":"2025-02-20T00:47:51.776Z","updated_at":"2025-10-12T00:44:03.820Z","avatar_url":"https://github.com/guessi.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# cloudtrail-cli\n\n[![GitHub Actions](https://github.com/guessi/cloudtrail-cli/actions/workflows/go.yml/badge.svg?branch=main)](https://github.com/guessi/cloudtrail-cli/actions/workflows/go.yml)\n[![GoDoc](https://godoc.org/github.com/guessi/cloudtrail-cli?status.svg)](https://godoc.org/github.com/guessi/cloudtrail-cli)\n[![Go Report Card](https://goreportcard.com/badge/github.com/guessi/cloudtrail-cli)](https://goreportcard.com/report/github.com/guessi/cloudtrail-cli)\n[![GitHub release](https://img.shields.io/github/release/guessi/cloudtrail-cli.svg)](https://github.com/guessi/cloudtrail-cli/releases/latest)\n[![GitHub go.mod Go version](https://img.shields.io/github/go-mod/go-version/guessi/cloudtrail-cli)](https://github.com/guessi/cloudtrail-cli/blob/main/go.mod)\n\nUser-friendly CloudTrail CLI: simple syntax, clean tables, no AWS documentation required\n\nStop fighting with complex `aws cloudtrail lookup-events` JSON parameters. This tool changes CloudTrail queries into simple, easy commands with clean table output. Perfect for developers who want CloudTrail data without learning complex AWS CLI. No need to read AWS documentation or build complex JSON queries. Just use simple flags like `--start-time` and `--event-source` to get your data. Results show in clean, easy tables that you can understand quickly - no JSON handling needed.\n\n## 🔢 Prerequisites\n\n* An IAM Role/User with [cloudtrail:LookupEvents](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_LookupEvents.html) permission.\n\n## 🚀 Quick start\n\n```bash\ncloudtrail-cli --help\n```\n\n```bash\ncloudtrail-cli --start-time 2025-05-12T00:00:00Z --end-time 2025-05-12T01:00:00Z --event-source sts.amazonaws.com --max-results 3\n+--------------------------------------+-------------------+----------------------+--------------------------------+-------------------+-------------------+-------------------+----------------------+-----------+----------+\n| EventId                              | EventName         | EventTime            | Username                       | EventSource       | UserAgent         | SourceIPAddress   | AccessKeyId          | ErrorCode | ReadOnly |\n+--------------------------------------+-------------------+----------------------+--------------------------------+-------------------+-------------------+-------------------+----------------------+-----------+----------+\n| 9a7304bb-fc9c-40ce-b148-25b875d5e534 | GetCallerIdentity | 2025-05-12T00:59:57Z | aws-go-sdk-1746934587741269082 | sts.amazonaws.com | eks.amazonaws.com | eks.amazonaws.com | ASIAEXAMPLE098765432 |           | true     |\n| d0db6d59-3277-4297-8f73-72eb00c35c77 | GetCallerIdentity | 2025-05-12T00:59:52Z | aws-go-sdk-1746830061119273752 | sts.amazonaws.com | eks.amazonaws.com | eks.amazonaws.com | ASIAEXAMPLE098765432 |           | true     |\n| ae8b7cb1-9b58-4897-be37-8f35ff077a99 | GetCallerIdentity | 2025-05-12T00:59:28Z | aws-go-sdk-1746830061119273752 | sts.amazonaws.com | eks.amazonaws.com | eks.amazonaws.com | ASIAEXAMPLE098765432 |           | true     |\n+--------------------------------------+-------------------+----------------------+--------------------------------+-------------------+-------------------+-------------------+----------------------+-----------+----------+\n```\n\n## :accessibility: FAQ\n\n### How do I get started with cloudtrail-cli?\n\nRun `cloudtrail-cli --help` to see all available options and filters.\n\n### What AWS permissions do I need?\n\nYour IAM user/role needs [cloudtrail:LookupEvents](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_LookupEvents.html) permission. If you get \"permission denied\" errors, verify this permission is granted.\n\n### How do I filter events by time range?\n\nUse `--start-time` and `--end-time` with RFC3339 format: `2025-05-12T00:00:00Z`\n\n### What happens if I only specify `--start-time` or `--end-time`?\n\n- If you only provide `--end-time`, events from 24 hours before that end time will be returned.\n- If you only provide `--start-time`, events from that time to now will be returned.\n\n### Can I use multiple filters at once?\n\nNo, use exactly one event filter at a time due to [AWS API limitations](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_LookupEvents.html#awscloudtrail-LookupEvents-request-LookupAttributes).\n\n### Why am I not getting any results?\n\nCheck if your time range contains events and ensure [only one event filter is used at a time](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_LookupEvents.html#awscloudtrail-LookupEvents-request-LookupAttributes).\n\n## 👷 Install\n\n### For macOS/Linux users (Recommended)\n\nBrand new install\n\n```bash\nbrew tap guessi/tap \u0026\u0026 brew update \u0026\u0026 brew install cloudtrail-cli\n```\n\nTo upgrade version\n\n```bash\nbrew update \u0026\u0026 brew upgrade cloudtrail-cli\n```\n\n### Manually setup (Linux, Windows, macOS)\n\n\u003cdetails\u003e\u003c!-- markdownlint-disable-line --\u003e\n\u003csummary\u003eClick to expand!\u003c/summary\u003e\u003c!-- markdownlint-disable-line --\u003e\n\n#### For Linux users\n\n```bash\ncurl -fsSL https://github.com/guessi/cloudtrail-cli/releases/latest/download/cloudtrail-cli-Linux-$(uname -m).tar.gz -o - | tar zxvf -\nmv ./cloudtrail-cli /usr/local/bin/cloudtrail-cli\n```\n\n#### For macOS users\n\n```bash\ncurl -fsSL https://github.com/guessi/cloudtrail-cli/releases/latest/download/cloudtrail-cli-Darwin-$(uname -m).tar.gz -o - | tar zxvf -\nmv ./cloudtrail-cli /usr/local/bin/cloudtrail-cli\n```\n\n#### For Windows users\n\n```powershell\n$SRC = 'https://github.com/guessi/cloudtrail-cli/releases/latest/download/cloudtrail-cli-Windows-x86_64.tar.gz'\n$DST = 'C:\\Temp\\cloudtrail-cli-Windows-x86_64.tar.gz'\nInvoke-RestMethod -Uri $SRC -OutFile $DST\n```\n\u003c/details\u003e\n\n## ⚖️ License\n\n[Apache-2.0](LICENSE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fguessi%2Fcloudtrail-cli","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fguessi%2Fcloudtrail-cli","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fguessi%2Fcloudtrail-cli/lists"}