AWS

CloudTrail Search

Filtered search across CloudTrail events: event name, principal, resource and category.

Tier Team+

Category Change & Audit

Refresh every 5 min

Scope regional

Live preview — demo data

What this pane shows

A search-first view of CloudTrail event history with structured filters: event name (e.g. PutBucketPolicy), principal, resource, category (IAM / S3 / KMS / Lambda / SG). Results paginate; each row expands to show the full event detail including request parameters. Mutating events only — Describe / Get / List are excluded to reduce noise.

Key use cases

Forensic investigation: who did X, when, from where?
Audit specific privileged actions (PutBucketPolicy, AttachRolePolicy, etc.).
Reconstruct a sequence of changes leading up to an incident.
Generate compliance evidence for specific event types over a date range.

How to embed

Drop this snippet on any HTML page that loads lp-embed.js. The pane mounts itself wherever the matching <div> is in the DOM.

<div class="lp-cloudtrail-search-panel"
     data-lp-account="<your-account-alias>"></div>
<script src="https://lightpane.io/embed/lp-embed.js"
        data-lp-key="<your-access-key>"></script>
<script src="https://lightpane.io/_pane-tests/aws/cloudtrail-search/cloudtrail-search.js"
        defer></script>

Tier

Available on Team+ and above.

Build notes

Mock-only at the moment — live-wiring tracked in the roadmap.