AWS

CloudTrail Search

Filtered search across CloudTrail events: event name, principal, resource and category.

Tier Team+

Category Change & Audit

Refresh every 5 min

Scope regional

Live preview — demo data

What this pane shows

A search-first view of CloudTrail event history with structured filters: event name (e.g. PutBucketPolicy), principal, resource, category (IAM / S3 / KMS / Lambda / SG). Results paginate; each row expands to show the full event detail including request parameters. Mutating events only — Describe / Get / List are excluded to reduce noise.

Key use cases

Forensic investigation: who did X, when, from where?
Audit specific privileged actions (PutBucketPolicy, AttachRolePolicy, etc.).
Reconstruct a sequence of changes leading up to an incident.
Generate compliance evidence for specific event types over a date range.

How to embed

lp.js is the single-entry loader: it injects the shared LightPane runtime (and sd-embed.css) once per page. Add this pane's own stylesheet and script; the pane mounts itself wherever the matching <div> is in the DOM.

<!-- In <head> — this pane's stylesheet -->
<link rel="stylesheet" href="https://lightpane.io/_pane-tests/aws/cloudtrail-search/cloudtrail-search.css">

<!-- Your access key (inline, or set window.lpEmbed.accessKey from your own JS) -->
<script>window.lpEmbed = { accessKey: "<your-access-key>" };</script>

<!-- Where the pane should appear -->
<div class="lp-cloudtrail-search-panel" data-lp-account="<your-account-alias>"></div>

<!-- Before </body> — shared loader + this pane's script -->
<script src="https://lightpane.io/embed/lp.js"></script>
<script src="https://lightpane.io/_pane-tests/aws/cloudtrail-search/cloudtrail-search.js" defer></script>

Tier

Available on Team+ and above.

Build notes

Mock-only at the moment — live-wiring tracked in the roadmap.