CloudTrail Event Analysis
Setup
- Run
make env
to create the virtual environment, andsource activate-env
to activate it thereafter. - Run
make test
to format and perform quality checks on the code.
Using
- Ensure
cloudtrail-2022-03.json
is present in the local directory. - Run
python analyze.py load
to recreate the database from raw JSON. - Run
python analyze.py exit-between <t0> <t1>
to show resources that existed betweent timest0
andt1
, expressed asYYYY-MM-DDTHH:MM:SSZ
strings. - Run
python analyze.py finite-resources
to show resources created and deleted within the scope of the raw JSON input's time bounds. - Run
python analyze.py reads-writes
to show total reads and writes for each resource.
TODO
- Split up long functions
- Write unit tests