{"repo":"fivexl/terraform-aws-cloudtrail-to-slack","free":true,"listed":false,"github":"https://github.com/fivexl/terraform-aws-cloudtrail-to-slack","clone":"git clone https://github.com/fivexl/terraform-aws-cloudtrail-to-slack.git","description":"Parse AWS CloudTrail events and send alerts to Slack for events that match pre-configured rules","language":"Python","stars":102,"topics":["cloudtrail","slack","aws","terraform","terraform-module","fivexl","lambda"],"license":"Apache-2.0","category":"deployment-docker-iac","readme_excerpt":"Want practical AWS infrastructure insights? 👉 Subscribe to our newsletter to get: - Real stories from real AWS projects - No-nonsense DevOps tactics - Cost, security & compliance patterns that actually work - Expert guidance from engineers in the field ========================================================================= - Terraform module to deploy lambda that sends notifications about AWS CloudTrail events to Slack - Why this module? - Example message - Configurations - Slack App (Recommended) - Slack Webhook - AWS SNS - SNS Fan-Out Pattern (Multiple Consumers) - Rules - Default rules: - Cloudwatch metrics - User defined rules to match events - Events to track - Custom Separator for Rules - Ignore Rules - About processing Cloudtrail events - Slack App configuration: - Terraform specs - Requirements - Providers - Modules - Resources - Inputs - Outputs - License - Weekly review link Terraform module to deploy lambda that sends notifications about AWS CloudTrail events to Slack Why this module? This module allows you to get notifications about: - actions performed by root account (According to AWS best practices, you should use root account as little as possible and use SSO or IAM users) - API calls that failed due to lack of permissions to do so (could be an indication of compromise or misconfiguration of your services/applications) - console logins without MFA (Always use MFA for you IAM users or SSO) - track a list of events that you might consider sensitive. Think IAM","default_branch":null,"files":null,"tree":[],"storefront":"/r/fivexl","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/fivexl/terraform-aws-cloudtrail-to-slack/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}