CloudTrail Alerts Reference | Lacework Documentation

📄️ Introduction to CloudTrail Alerts

This section provides information about some of the CloudTrail security alerts visible in the Lacework Console.

This event detects the deletion of an existing access key.

This event detects an AWS CloudTrail change.

This event detects if an AWS CloudTrail was deleted.

This event detects if AWS CloudTrail logging has been stopped.

This event detects the creation of a new IAM Access key and the deletion of an existing access key.

This event detects an AWS IAM policy change.

This event detects an AWS network ACL change.

This event detects a network gateway change.

This event detects the creation of a new AWS access key.

This event detects the creation of a new AWS customer master key.

This event detects the creation of a new AWS customer master key alias.

This event detects the creation of a new AWS S3 bucket.

This event detects the creation of a new VPC.

This event detects the creation of a new VPN connection.

This event detects a route table change.

This event detects an S3 bucket ACL change.

This event detects the deletion of an S3 bucket in any AWS account.

This event detects an AWS S3 bucket policy change.

This event detects a security group permissions change and deletion of a security group.

This event detects a VPC configuration change.

This event detects a VPN gateway change.