将 DescribeTrails 与 CLI 配合使用

描述跟踪

以下 describe-trails 示例返回 Trail1 和 Trail2 的设置。

aws cloudtrail describe-trails \
    --trail-name-list Trail1 Trail2

输出：

{
    "trailList": [
        {
            "IncludeGlobalServiceEvents": true,
            "Name": "Trail1",
            "TrailARN": "arn:aws:cloudtrail:us-east-1:123456789012:trail/Trail1",
            "LogFileValidationEnabled": false,
            "IsMultiRegionTrail": false,
            "S3BucketName": "amzn-s3-demo-bucket",
            "CloudWatchLogsRoleArn": "arn:aws:iam::123456789012:role/CloudTrail_CloudWatchLogs_Role",
            "CloudWatchLogsLogGroupArn": "arn:aws:logs:us-east-1:123456789012:log-group:CloudTrail:*",
            "SnsTopicName": "my-topic",
            "HomeRegion": "us-east-1"
        },
        {
            "IncludeGlobalServiceEvents": true,
            "Name": "Trail2",
            "S3KeyPrefix": "my-prefix",
            "TrailARN": "arn:aws:cloudtrail:us-east-1:123456789012:trail/Trail2",
            "LogFileValidationEnabled": false,
            "IsMultiRegionTrail": false,
            "S3BucketName": "amzn-s3-demo-bucket2",
            "KmsKeyId": "arn:aws:kms:us-east-1:123456789012:key/4c5ae5ac-3c13-421e-8335-c7868ef6a769",
            "HomeRegion": "us-east-1"
        }
    ]
}

示例 1：返回与您账户的当前区域关联的所有跟踪的设置。

Get-CTTrail

示例 2：返回指定跟踪的设置。

Get-CTTrail -TrailNameList trail1,trail2

示例 3：返回在当前 Shell 默认区域以外的区域 [在本例中为法兰克福（eu-central-1）区域] 中创建的指定跟踪的设置。

Get-CTTrail -TrailNameList trailABC,trailDEF -Region eu-central-1

示例 1：返回与您账户的当前区域关联的所有跟踪的设置。

Get-CTTrail

示例 2：返回指定跟踪的设置。

Get-CTTrail -TrailNameList trail1,trail2

示例 3：返回在当前 Shell 默认区域以外的区域 [在本例中为法兰克福（eu-central-1）区域] 中创建的指定跟踪的设置。

Get-CTTrail -TrailNameList trailABC,trailDEF -Region eu-central-1